last executing test programs: 7m22.654290522s ago: executing program 32 (id=28): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0x57) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x78, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m27.621902675s ago: executing program 33 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000bc0)={[{@user_xattr}, {@nojournal_checksum}, {@resuid}, {@errors_remount}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000002f80)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) 6m15.025015133s ago: executing program 1 (id=161): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x1000000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x12, 0x1, 0x0, 0x0, @str='+\x00\x00\x00*%*[-#\xd9&-\x00'}]}, 0x28}}, 0x0) 6m4.718109121s ago: executing program 2 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 6m3.154299683s ago: executing program 2 (id=176): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3}, 0x5}], 0x1, 0x2000, 0x0) 6m1.861277933s ago: executing program 2 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(0x0, 0x5, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m55.981456715s ago: executing program 34 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$loop(0x0, 0x5, 0x80000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m55.662449389s ago: executing program 35 (id=161): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket(0x2, 0x3, 0xff) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x1000000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x28, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x12, 0x1, 0x0, 0x0, @str='+\x00\x00\x00*%*[-#\xd9&-\x00'}]}, 0x28}}, 0x0) 5m45.127309189s ago: executing program 36 (id=188): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x10009, 0x9, 0xffffffffffffffff, 0x5, 0x0, 0xffffffffffffffff, 0x7a6e, 0x4, 0xfc, 0xf, 0x4000000000008, 0xc0, 0x2, 0x2, 0xfffffffffffffffc, 0x2], 0x8000000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f0000000440)={[{@nombcache}, {@noblock_validity}, {@noquota}, {@errors_remount}, {@dioread_nolock}]}, 0x1, 0x524, &(0x7f00000004c0)="$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") syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x453, 0x20, 0x70bd2b, 0x25dfdbfb, '\x00'}, 0x14}, 0x1, 0x0, 0x0, 0x4008140}, 0x880) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x8000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x7, 0x0, @void}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10001, 0xffffffffffffff20}) r8 = gettid() tkill(r8, 0x12) tkill(r8, 0x1) 5m27.20883098s ago: executing program 37 (id=198): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x4004743d, 0x110e22fffe) 5m16.350689272s ago: executing program 38 (id=204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010d8a588ac9b0000000001090224000100000000090400000103000000092100000001220b000905810300"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\f\x00\x00\x00'], 0x0}, 0x0) 4m6.516246481s ago: executing program 39 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x4f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") 4m2.205845969s ago: executing program 3 (id=253): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 4m1.098854698s ago: executing program 3 (id=255): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 4m0.788342181s ago: executing program 7 (id=256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001000000", @ANYRES32=r3], 0x20}}, 0x0) 4m0.132053756s ago: executing program 3 (id=257): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 3m56.164761484s ago: executing program 40 (id=257): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 3m56.074865447s ago: executing program 7 (id=261): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x3, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x2b, 0x0, 0x1, 0x9}}}], 0x18}, 0xc844) 3m55.379826401s ago: executing program 0 (id=263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 3m55.349785674s ago: executing program 7 (id=264): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m54.298615607s ago: executing program 7 (id=266): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3m54.107751157s ago: executing program 0 (id=267): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) close_range(r1, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="dd", 0x1}], 0x1, 0xf) 3m53.034086444s ago: executing program 7 (id=268): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x7, 0x7, 0x0, 0x10002, 0x10000000000, 0x804002004c4, 0x40001001, 0x8000000000000001, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m49.772397079s ago: executing program 41 (id=268): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x7, 0x7, 0x0, 0x10002, 0x10000000000, 0x804002004c4, 0x40001001, 0x8000000000000001, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m44.779127447s ago: executing program 0 (id=271): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$bpf(0x0, 0x0, 0x0, 0x220ac44, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 3m42.991264187s ago: executing program 0 (id=274): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m42.018267944s ago: executing program 0 (id=276): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x42) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40081271, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x2d) 3m41.084215761s ago: executing program 0 (id=277): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0) lseek(r0, 0x2, 0x4) 3m37.657418101s ago: executing program 42 (id=277): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0) lseek(r0, 0x2, 0x4) 3m32.573455128s ago: executing program 9 (id=280): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m31.887419432s ago: executing program 9 (id=281): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x3d) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) 3m30.915429844s ago: executing program 9 (id=282): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r5) setfsgid(r5) setfsgid(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) 3m25.834910568s ago: executing program 9 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m24.168624932s ago: executing program 9 (id=284): pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x803, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580), 0x0, 0x10008095, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/mcfilter\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/81, 0x51}], 0x1, 0x78, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="06c0c8c88cd30ba1040000003445f44da2b4471756848685833a6c2a242b09b0b31bf113ff1baa3b64a0b391ec48f87431929ce14cd22e7c9cddc83d9b6a36d2318439a251c3a011c0cec23306326d59886297698a74ba53703de8fa67861b36358fdcc014ce785260e7af80b5007f80c7c1311f0e82507a"], 0x50) 3m23.369171679s ago: executing program 9 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x81000) symlinkat(0x0, r3, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xb, 0x3}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000001000)='workqueue_queue_work\x00', r9}, 0x18) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m18.781459204s ago: executing program 43 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x81000) symlinkat(0x0, r3, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0xb, 0x3}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000001000)='workqueue_queue_work\x00', r9}, 0x18) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m17.213305076s ago: executing program 2 (id=247): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3m15.472649555s ago: executing program 2 (id=287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000740)=@newqdisc={0x7c, 0x24, 0xf0b, 0xffdffffe, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0xfffffffffffffffc, 0x0, 0xffffffff, 0x3}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 3m13.965532924s ago: executing program 2 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x2810000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x25, 0x334, &(0x7f0000000c00)="$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") getegid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x0) 3m10.629664326s ago: executing program 1 (id=259): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) unshare(0x22020600) preadv(r0, 0x0, 0x0, 0x0, 0x0) 3m9.82303734s ago: executing program 1 (id=289): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") syz_usb_connect(0x3, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000229639010861a2d754d2d0102030109021b0001000000000904010001e90cbd00090503"], 0x0) 3m6.36554847s ago: executing program 1 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 3m4.352145732s ago: executing program 1 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x2931890e, r0}, 0x33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = getpid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 3m3.407560891s ago: executing program 1 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2m59.140237941s ago: executing program 44 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 2m58.374566869s ago: executing program 45 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x2810000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x25, 0x334, &(0x7f0000000c00)="$eJzs3U1oXNUXAPAzfUkmDfSfLP5QdDW6E6Q0ERe6SigVilloZfBr42BTPzJjIYMDcZHpbBSXihtBV+660GXX4kLEnQu3VpCquLG7QotPZt7Lmzcfsak4qR+/36Iczr1n7nmvl8zLkNy8tB7bF+bj4o0b12NxsRJz62fW42YlVuJYJJG5HADAv8nNNI1f08ydZ7+/tB8tzLgvAGB2Bu//r5wYJqr3shsA4Cgc8vv/p6ZmL82sLQBghibe/x8cGR77mH+u+JkAAOCf65nnX3hyYzPifK22GNF6p1Pv1OPx4fjGxXgtmrEVp2M5bkdkDwrZ00L/3yfObZ49Xev7cSWKTxBa3U49e1LYSAb11ViN5VjJ69OiPunXrw7qaxFxuTtYP1qVTn0+lvL1v1uKrViL5fj/RH3Euc2za7X8Beqt/fpuRC8W99vp938qluObl+NSNONC9GuH/e+t1mpn0s2R+s6V6mAeAAAAAAAAAAAAAAAAAAAAAADMwqlaYaU4/yZtdTtvnx+fsDJyPk49G87PB+pl5wOl1f3Ted5Nxs8HGj2fp1Ofi2P39MoBAAAAAAAAAAAAAAAAAADg76O9uxCNZnNrp7371nY56JYyb3z16RfHY3zO68kwE3PZy43MyXNRqkqiKE+L8jQZmZMHScRw8pWrRcflOdXiKibK+0F1YqiS99RoNk888MNH06p+G2aSmLgto0ElX7801PpflvqDqoODtTvMuZam6UHlex9OVkUlYm7iP+6vCL68/up9j7RPPjrIfJ4f+vDQw8vPXvvgk5+3G83Ib02zubDTvp3+6bWS0v6p5Pe5MmUnTA96w0xvp73bSL795bn73/t6bHIyff+k5cybB6/12XhmIQv6bR7mSuenbP7pwYu3it179zfz5Mfrjat73/902KrSFwkHdQAAAAAAAAAAAAAAAAAAwJEo/a74XXjs6dl1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHb/j3/0tBbyJzmOBWNyaHqls77QMXP36klwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/Y7wEAAP//nGp4yw==") getegid() r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x0) 2m14.364778804s ago: executing program 3 (id=294): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x890b, &(0x7f0000000000)=@buf={0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1c, 0x16, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) keyctl$session_to_parent(0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, &(0x7f0000000240)='%ps \x00'}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000240)={0x11, {{0x29, 0x0, 0x5000000, @local, 0x7ff}}}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xe4, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x42, 0x854b, 0x9, 0x0, 0x6, 0x5, 0x6}}, {0x10, 0x2, [0xfffe, 0x2, 0x8, 0xb, 0x6, 0x4]}}, {{0x1c, 0x1, {0xe, 0xd, 0x9, 0x9, 0x2, 0x4, 0x6, 0x3}}, {0xa, 0x2, [0xfff, 0x10, 0x40]}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0x5, 0x1, 0x5, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xd1, 0x40, 0x7, 0x9, 0x1, 0x8, 0x80000000, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x2, 0x9, 0x8, 0x3ff, 0x2, 0x7, 0x7, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0xe4}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) clock_adjtime(0x3, &(0x7f0000000100)={0xfffffffffffffffc, 0x6, 0xe1, 0x4, 0xc, 0x3, 0x4, 0xffffffff00000001, 0x400, 0x2, 0x9, 0x9, 0x3ff, 0xffffffff, 0x3, 0x1fa, 0x9, 0x8d, 0x1, 0x42e6, 0x1ff, 0x1ff, 0x0, 0x4, 0x6, 0x736}) 2m8.811304795s ago: executing program 3 (id=328): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e008015"], 0xa8}}, 0x2) 2m7.218190673s ago: executing program 3 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kcmp(r5, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB='@\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000d0000000000000000000000000000050000000000000000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000004000000020000000000"], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, 0x0) 1m51.453291996s ago: executing program 46 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) kcmp(r5, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB='@\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000d0000000000000000000000000000050000000000000000"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0100000004000000020000000000"], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, 0x0) 22.867731305s ago: executing program 5 (id=488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}]}}, 0x0, 0x2a}, 0x28) 21.589830188s ago: executing program 5 (id=490): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x9b237afb5e3e07d5, 0x1}, 0x0, 0x0, 0x0, 0x0}) 18.691337137s ago: executing program 5 (id=495): setuid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(r0, 0x6, &(0x7f0000000180), &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = dup2(r9, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r10}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0) 15.371187168s ago: executing program 8 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) 14.373234967s ago: executing program 6 (id=499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) 14.237711439s ago: executing program 8 (id=500): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 14.175720524s ago: executing program 4 (id=501): socket$igmp6(0xa, 0x3, 0x2) rename(0x0, &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) 13.315060975s ago: executing program 6 (id=502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 11.103221686s ago: executing program 8 (id=503): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000000000ebff0a"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 9.310914412s ago: executing program 8 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d0500000200000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) 9.163950807s ago: executing program 4 (id=505): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) 8.274867617s ago: executing program 6 (id=506): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) setregid(0x0, 0xee01) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000c3fd00"/24], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.910851804s ago: executing program 4 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x3a, 0x0) 6.676860839s ago: executing program 4 (id=508): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 5.754843032s ago: executing program 6 (id=509): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xc, &(0x7f0000000180)=""/128, &(0x7f0000000080)=0x80) 5.351410772s ago: executing program 4 (id=510): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() memfd_create(&(0x7f00000000c0)='sched_switch\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 4.753242518s ago: executing program 5 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff92) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sync() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0x0, r4, {0x0, 0x1}}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000a00)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001b40)=ANY=[], 0x835, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280), &(0x7f0000000680)={0x0, 0xfb, 0x103, 0x1, 0x0, "862fc4a293f080fe14707e9917d81a83", "ac2279b1d2c448424dd6073ec9e0f292307bda7a375833ebb192ad4b260c0a180bc4643570e1e03502139c0098e9bf3c792f28ec1d39462b66cfd39f8447327ef6f34e9738b0c9f2e1512fbf8bd8ae1b143f428907cd3ffcda14ee052aef300c42c364b90b15940c7b8cf53be4124de4ce6336e65c1480640ce98cff8f159aeca4b1cf5f21bf9b3814da3ca7f90489141ed087cc137c79f0ffa206047135d6bb96d23db8bede4c879f1ca3c94642d25c05c7cdc4983f621fa3cd4f816d1572a819bc22fcd4247aad03ffbd1117d314fd3df5a41870c36261e52134530e6ec88a730c476740205b9f9947c2c86e01"}, 0x103, 0x1) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x7fff}, 0x0) io_setup(0xffff, &(0x7f0000001080)) 4.674171552s ago: executing program 6 (id=512): pselect6(0x40, &(0x7f0000000080)={0x0, 0x1d, 0x8000000000, 0x300}, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0xeab264af5b3e28b3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0xf03, 0x4, 0x5}, 0x50) mount$binder(0x0, 0x0, &(0x7f0000000080), 0x20c411, 0x0) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x10022, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) signalfd(r0, &(0x7f0000000040)={[0xe9b]}, 0x8) 3.599018222s ago: executing program 8 (id=513): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103000000000000ebff0a"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 3.188094626s ago: executing program 7 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) pipe2$9p(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000280)='sysfs\x00', 0x1014040, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x4) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.917906105s ago: executing program 5 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000280), &(0x7f0000000840)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[], 0xffdd) 1.525686737s ago: executing program 8 (id=515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) syz_usb_control_io$hid(r0, 0x0, 0x0) 747.531326ms ago: executing program 6 (id=516): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x24010000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="002207000000a14486f855dfe9cd49a7"], 0x0}, 0x0) 277.148209ms ago: executing program 4 (id=517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) ftruncate(r0, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a0000000000001801000020207825000000001b6f20207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000085f1526140a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x6f) timer_create(0x1, &(0x7f0000000140)={0x0, 0xc, 0x2, @thr={&(0x7f00000002c0)="6b40fbac086604d8a8ef11d1f1d953b43bff7613c0903e9d4eb53bce779f98c578b3890e6298f3f5e5ce1654f07788b997f4275c95292ce2c555ce5870d06259f2a1e1f86d9092cd8c1d00f2dd6fc2b111e0285ce96c22c159276daff7d9619c920a7a82891eaad320c186a5", &(0x7f0000000500)="2082bcf2a1d67099077b5339bdbce7839e23ca39480be2d551d6ed19b013ed80826687026cc51f002ebd44abbeb9e63e1c52a28719e019b053fc1f4b1fb079efa71ab905330d710f53e57dd2fada4025fe5699b880ac8ed4276a3b5db24995da84ccde13cdf53c0c5f550756220b36bfec8bb8057c5ca4d1709ccfd5448841f44ce80411a4fc5812aed0603a8b7bb0cb737d3ba64b8c054e97"}}, &(0x7f00000005c0)) timer_getoverrun(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 5 (id=518): mkdir(0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) creat(&(0x7f0000000280)='./bus\x00', 0xa0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): nging to 10 [ 480.080428][ T5350] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 480.090047][ T5350] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.130416][ T12] bridge_slave_1: left allmulticast mode [ 480.136662][ T12] bridge_slave_1: left promiscuous mode [ 480.146065][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.239945][ T12] bridge_slave_0: left allmulticast mode [ 480.248513][ T12] bridge_slave_0: left promiscuous mode [ 480.257412][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.272853][ T5350] usb 9-1: config 0 descriptor?? [ 480.953408][ T5350] pyra 0003:1E7D:2C24.0004: item fetching failed at offset 0/3 [ 480.975866][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.004724][ T5350] pyra 0003:1E7D:2C24.0004: parse failed [ 481.011045][ T5350] pyra 0003:1E7D:2C24.0004: probe with driver pyra failed with error -22 [ 481.040261][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.069798][ T12] bond0 (unregistering): Released all slaves [ 481.195037][ T5350] usb 9-1: USB disconnect, device number 2 [ 481.752915][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.761291][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.882903][ T5812] Bluetooth: hci4: command tx timeout [ 481.962294][ T6835] veth0_vlan: entered promiscuous mode [ 482.285978][ T12] hsr_slave_0: left promiscuous mode [ 482.326543][ T12] hsr_slave_1: left promiscuous mode [ 482.336355][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.344478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.416908][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.425054][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.516676][ T12] veth1_macvtap: left promiscuous mode [ 482.522548][ T12] veth0_macvtap: left promiscuous mode [ 482.529246][ T12] veth1_vlan: left promiscuous mode [ 482.535209][ T12] veth0_vlan: left promiscuous mode [ 483.405139][ T6984] netlink: 40 bytes leftover after parsing attributes in process `syz.8.212'. [ 483.415216][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.8.212'. [ 483.581915][ T6984] loop8: detected capacity change from 0 to 512 [ 483.601268][ T12] team0 (unregistering): Port device team_slave_1 removed [ 483.649271][ T12] team0 (unregistering): Port device team_slave_0 removed [ 483.773954][ T6984] EXT4-fs error (device loop8): __ext4_iget:5379: inode #11: block 1: comm syz.8.212: invalid block [ 483.848775][ T6984] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.212: couldn't read orphan inode 11 (err -117) [ 483.890310][ T6984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.944223][ T5812] Bluetooth: hci4: command tx timeout [ 484.743735][ T6987] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 484.849439][ T6835] veth1_vlan: entered promiscuous mode [ 484.874154][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.882134][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.890476][ T6936] bridge_slave_0: entered allmulticast mode [ 484.902189][ T6936] bridge_slave_0: entered promiscuous mode [ 485.132965][ T6936] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.141600][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.149762][ T6936] bridge_slave_1: entered allmulticast mode [ 485.160195][ T6936] bridge_slave_1: entered promiscuous mode [ 485.566037][ T6685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.726333][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.754845][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.777028][ T6936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.797726][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.826851][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.867462][ T6835] veth0_macvtap: entered promiscuous mode [ 485.882237][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.285077][ T6835] veth1_macvtap: entered promiscuous mode [ 486.325291][ T6936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.832957][ T6936] team0: Port device team_slave_0 added [ 486.871249][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.936401][ T6936] team0: Port device team_slave_1 added [ 486.976137][ T7007] loop8: detected capacity change from 0 to 1024 [ 487.174070][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.287065][ T7007] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.301047][ T7007] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.501149][ T6835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.510793][ T6835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.521086][ T6835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.530413][ T6835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.557832][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.565385][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.592124][ T6936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.741743][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.8.213'. [ 487.778976][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.8.213'. [ 487.875410][ T6936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.882782][ T6936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.910305][ T6936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.044764][ T49] Bluetooth: hci1: command tx timeout [ 488.321722][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.330341][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.437134][ T6936] hsr_slave_0: entered promiscuous mode [ 488.455063][ T6936] hsr_slave_1: entered promiscuous mode [ 488.465170][ T6936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.474389][ T6936] Cannot create hsr debugfs directory [ 488.657045][ T6999] chnl_net:caif_netlink_parms(): no params data found [ 488.737998][ T12] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 488.860495][ T12] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 488.873708][ T12] EXT4-fs (loop8): This should not happen!! Data will be lost [ 488.873708][ T12] [ 488.959936][ T88] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.968358][ T88] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.026294][ T6685] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.106829][ T49] Bluetooth: hci1: command tx timeout [ 490.118423][ T4669] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.423004][ T4669] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.715432][ T4669] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.961425][ T4669] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.022382][ T30] audit: type=1326 audit(1751727757.608:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 491.045376][ T30] audit: type=1326 audit(1751727757.608:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 491.068780][ T30] audit: type=1326 audit(1751727757.608:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 491.092429][ T30] audit: type=1326 audit(1751727757.618:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 491.117025][ T30] audit: type=1326 audit(1751727757.618:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 491.609344][ T30] audit: type=1326 audit(1751727757.748:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 491.634090][ T30] audit: type=1326 audit(1751727757.748:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 491.657212][ T30] audit: type=1326 audit(1751727757.748:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7037 comm="syz.8.215" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 492.155008][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.163520][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.171565][ T6999] bridge_slave_0: entered allmulticast mode [ 492.185076][ T49] Bluetooth: hci1: command tx timeout [ 492.287117][ T6999] bridge_slave_0: entered promiscuous mode [ 492.455657][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.463600][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.471526][ T6999] bridge_slave_1: entered allmulticast mode [ 492.481902][ T6999] bridge_slave_1: entered promiscuous mode [ 493.105352][ T4669] bridge_slave_1: left allmulticast mode [ 493.111571][ T4669] bridge_slave_1: left promiscuous mode [ 493.119769][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.226410][ T4669] bridge_slave_0: left allmulticast mode [ 493.232590][ T4669] bridge_slave_0: left promiscuous mode [ 493.242202][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.064207][ T4669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.105691][ T4669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.139647][ T4669] bond0 (unregistering): Released all slaves [ 494.217986][ T6999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.303546][ T49] Bluetooth: hci1: command tx timeout [ 494.420486][ T6999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.126691][ T6999] team0: Port device team_slave_0 added [ 495.229255][ T6999] team0: Port device team_slave_1 added [ 495.351489][ T6936] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 495.711170][ T6936] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 495.854793][ T4669] hsr_slave_0: left promiscuous mode [ 495.895717][ T4669] hsr_slave_1: left promiscuous mode [ 495.904583][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.912593][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.003534][ T7072] loop0: detected capacity change from 0 to 1024 [ 496.017134][ T4669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.029139][ T4669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.179850][ T4669] veth1_macvtap: left promiscuous mode [ 496.187287][ T4669] veth0_macvtap: left promiscuous mode [ 496.193729][ T4669] veth1_vlan: left promiscuous mode [ 496.199454][ T4669] veth0_vlan: left promiscuous mode [ 496.257586][ T7072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.272447][ T7072] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.902676][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 496.966559][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 497.328723][ T4669] team0 (unregistering): Port device team_slave_1 removed [ 497.364341][ T4669] team0 (unregistering): Port device team_slave_0 removed [ 498.253009][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.260999][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.291697][ T6999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.327706][ T6936] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 498.464753][ T6999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.472018][ T6999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.502737][ T6999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.549214][ T6936] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 498.844997][ T12] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 499.026667][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 499.039772][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 499.039772][ T12] [ 499.203856][ T6792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.231127][ T6999] hsr_slave_0: entered promiscuous mode [ 499.254969][ T6999] hsr_slave_1: entered promiscuous mode [ 499.264964][ T6999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.274262][ T6999] Cannot create hsr debugfs directory [ 501.161301][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.171740][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.374772][ T6936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.665184][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.673678][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.741147][ T6936] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.881646][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.889942][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.070678][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.078566][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.365454][ T6999] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 502.488348][ T6999] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 502.588354][ T6999] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 502.625229][ T7117] loop8: detected capacity change from 0 to 2048 [ 502.718336][ T7117] ext4: Unknown parameter 'nouser_xattr' [ 502.746158][ T6999] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 504.561084][ T7132] loop3: detected capacity change from 0 to 256 [ 504.617574][ T6999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.969200][ T6999] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.197496][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.206015][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.316330][ T7132] FAT-fs (loop3): Directory bread(block 64) failed [ 505.323484][ T7132] FAT-fs (loop3): Directory bread(block 65) failed [ 505.330515][ T7132] FAT-fs (loop3): Directory bread(block 66) failed [ 505.337815][ T7132] FAT-fs (loop3): Directory bread(block 67) failed [ 505.347552][ T7132] FAT-fs (loop3): Directory bread(block 68) failed [ 505.355772][ T7132] FAT-fs (loop3): Directory bread(block 69) failed [ 505.362883][ T7132] FAT-fs (loop3): Directory bread(block 70) failed [ 505.369861][ T7132] FAT-fs (loop3): Directory bread(block 71) failed [ 505.377305][ T7132] FAT-fs (loop3): Directory bread(block 72) failed [ 505.384802][ T7132] FAT-fs (loop3): Directory bread(block 73) failed [ 505.417746][ T7135] veth1_macvtap: left promiscuous mode [ 505.424316][ T7135] macsec0: entered promiscuous mode [ 505.459583][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.468347][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.513517][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.760665][ T7143] loop0: detected capacity change from 0 to 1024 [ 507.115166][ T7143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.128424][ T7143] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.406664][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 507.502196][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.231'. [ 508.074804][ T4871] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:23: lblock 1 mapped to illegal pblock 1 (length 1) [ 508.124682][ T4871] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 508.137916][ T4871] EXT4-fs (loop0): This should not happen!! Data will be lost [ 508.137916][ T4871] [ 508.167691][ T6792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.566501][ T6999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.167539][ T7168] loop0: detected capacity change from 0 to 16 [ 509.282327][ T7168] erofs (device loop0): mounted with root inode @ nid 36. [ 509.282415][ T6936] veth0_vlan: entered promiscuous mode [ 509.531768][ T6936] veth1_vlan: entered promiscuous mode [ 509.981986][ T6936] veth0_macvtap: entered promiscuous mode [ 510.094106][ T6936] veth1_macvtap: entered promiscuous mode [ 510.366785][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.529048][ T6936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.673190][ T6936] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.684039][ T6936] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.693980][ T6936] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.703342][ T6936] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.391763][ T6999] veth0_vlan: entered promiscuous mode [ 512.552601][ T6999] veth1_vlan: entered promiscuous mode [ 512.938208][ T6999] veth0_macvtap: entered promiscuous mode [ 512.988311][ T6999] veth1_macvtap: entered promiscuous mode [ 513.239226][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.453580][ T6999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.589033][ T6999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.599191][ T6999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.608947][ T6999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.618317][ T6999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.093765][ T7219] loop3: detected capacity change from 0 to 1024 [ 516.326707][ T7219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.340505][ T7219] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.841877][ T4396] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 516.909687][ T4396] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 516.927302][ T4396] EXT4-fs (loop3): This should not happen!! Data will be lost [ 516.927302][ T4396] [ 516.986124][ T6835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.084555][ T1145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.322569][ T1145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.621641][ T1145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.839580][ T1145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.655719][ T1145] bridge_slave_1: left allmulticast mode [ 519.661768][ T1145] bridge_slave_1: left promiscuous mode [ 519.669016][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.815798][ T1145] bridge_slave_0: left allmulticast mode [ 519.821801][ T1145] bridge_slave_0: left promiscuous mode [ 519.830406][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.735326][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.807876][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.839667][ T1145] bond0 (unregistering): Released all slaves [ 521.601484][ T1145] hsr_slave_0: left promiscuous mode [ 521.644695][ T1145] hsr_slave_1: left promiscuous mode [ 521.653415][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.661247][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.728322][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.737721][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.824553][ T1145] veth0_macvtap: left promiscuous mode [ 521.832992][ T1145] veth1_vlan: left promiscuous mode [ 521.839076][ T1145] veth0_vlan: left promiscuous mode [ 522.896174][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 523.013577][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 523.978074][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.985455][ T4669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.985563][ T4669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.036605][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.056180][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.113642][ T4871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.122033][ T4871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.135976][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.177303][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.164486][ T7274] chnl_net:caif_netlink_parms(): no params data found [ 526.263823][ T5812] Bluetooth: hci2: command tx timeout [ 526.505958][ T4669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.514276][ T4669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.738189][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.748979][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.871148][ T7295] loop7: detected capacity change from 0 to 1024 [ 527.205262][ T7295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.218476][ T7295] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.354421][ T7302] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 527.980927][ T4396] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 528.034060][ T4396] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 528.046878][ T4396] EXT4-fs (loop7): This should not happen!! Data will be lost [ 528.046878][ T4396] [ 528.157965][ T6936] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.352751][ T5812] Bluetooth: hci2: command tx timeout [ 528.922965][ T3666] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.074248][ T7274] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.081973][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.090308][ T7274] bridge_slave_0: entered allmulticast mode [ 529.109365][ T7274] bridge_slave_0: entered promiscuous mode [ 529.213856][ T3666] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.340621][ T7274] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.348915][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.357491][ T7274] bridge_slave_1: entered allmulticast mode [ 529.367966][ T7274] bridge_slave_1: entered promiscuous mode [ 529.487899][ T3666] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.044193][ T3666] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.143421][ T7274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.261797][ T7274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.426210][ T5812] Bluetooth: hci2: command tx timeout [ 530.873847][ T3666] bridge_slave_1: left allmulticast mode [ 530.879870][ T3666] bridge_slave_1: left promiscuous mode [ 530.887150][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.974696][ T3666] bridge_slave_0: left allmulticast mode [ 530.980703][ T3666] bridge_slave_0: left promiscuous mode [ 530.987986][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.695460][ T3666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.769345][ T3666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.820953][ T3666] bond0 (unregistering): Released all slaves [ 531.934757][ T7274] team0: Port device team_slave_0 added [ 531.978028][ T7274] team0: Port device team_slave_1 added [ 532.281339][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.289135][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.316149][ T7274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.504357][ T5812] Bluetooth: hci2: command tx timeout [ 532.564848][ T7274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.572150][ T7274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.604597][ T7274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.043376][ T3666] hsr_slave_0: left promiscuous mode [ 533.104490][ T3666] hsr_slave_1: left promiscuous mode [ 533.114172][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.122355][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.177180][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.186211][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.343575][ T3666] veth1_macvtap: left promiscuous mode [ 533.349652][ T3666] veth0_macvtap: left promiscuous mode [ 533.357971][ T3666] veth1_vlan: left promiscuous mode [ 533.363834][ T3666] veth0_vlan: left promiscuous mode [ 534.608353][ T7344] loop9: detected capacity change from 0 to 1024 [ 534.847678][ T3666] team0 (unregistering): Port device team_slave_1 removed [ 534.891061][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.908716][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.926863][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.944745][ T7344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.959850][ T7344] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.993470][ T3666] team0 (unregistering): Port device team_slave_0 removed [ 535.180715][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.195961][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.922387][ T7274] hsr_slave_0: entered promiscuous mode [ 535.934389][ T7274] hsr_slave_1: entered promiscuous mode [ 535.945917][ T7274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.954724][ T7274] Cannot create hsr debugfs directory [ 536.090043][ T6999] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.749395][ T3666] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.946575][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.953904][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.022485][ T3666] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.228780][ T3666] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.313774][ T5812] Bluetooth: hci0: command tx timeout [ 537.439318][ T3666] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.193504][ T3666] bridge_slave_1: left allmulticast mode [ 538.199503][ T3666] bridge_slave_1: left promiscuous mode [ 538.206744][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.331366][ T3666] bridge_slave_0: left allmulticast mode [ 538.337598][ T3666] bridge_slave_0: left promiscuous mode [ 538.344735][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.946289][ T3666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.995383][ T3666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.061202][ T3666] bond0 (unregistering): Released all slaves [ 539.395327][ T5812] Bluetooth: hci0: command tx timeout [ 539.414382][ T7349] chnl_net:caif_netlink_parms(): no params data found [ 539.965250][ T3666] hsr_slave_0: left promiscuous mode [ 539.996593][ T3666] hsr_slave_1: left promiscuous mode [ 540.005853][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.013960][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.076849][ T3666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.084988][ T3666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.163844][ T3666] veth1_macvtap: left promiscuous mode [ 540.169746][ T3666] veth0_macvtap: left promiscuous mode [ 540.177831][ T3666] veth1_vlan: left promiscuous mode [ 540.183707][ T3666] veth0_vlan: left promiscuous mode [ 540.610227][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.626727][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.637138][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.653956][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.667093][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 541.249747][ T3666] team0 (unregistering): Port device team_slave_1 removed [ 541.279905][ T3666] team0 (unregistering): Port device team_slave_0 removed [ 541.463769][ T49] Bluetooth: hci0: command tx timeout [ 542.705199][ T7274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 542.743751][ T49] Bluetooth: hci4: command tx timeout [ 542.783426][ T7274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 542.865761][ T7274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.007076][ T7274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 543.439563][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.450138][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.458303][ T7349] bridge_slave_0: entered allmulticast mode [ 543.468904][ T7349] bridge_slave_0: entered promiscuous mode [ 543.524884][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.532672][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.544669][ T7349] bridge_slave_1: entered allmulticast mode [ 543.555154][ T7349] bridge_slave_1: entered promiscuous mode [ 543.569757][ T49] Bluetooth: hci0: command tx timeout [ 543.856372][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.959990][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.375224][ T7368] chnl_net:caif_netlink_parms(): no params data found [ 544.522535][ T7349] team0: Port device team_slave_0 added [ 544.636754][ T7349] team0: Port device team_slave_1 added [ 544.832335][ T49] Bluetooth: hci4: command tx timeout [ 545.161692][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.169386][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.195901][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.205720][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.406713][ T7274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.446942][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.456024][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.482200][ C0] vkms_vblank_simulate: vblank timer overrun [ 545.490647][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.595291][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.762352][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.770293][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.029827][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.037677][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.210190][ T7349] hsr_slave_0: entered promiscuous mode [ 546.221573][ T7349] hsr_slave_1: entered promiscuous mode [ 546.231410][ T7349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.239437][ T7349] Cannot create hsr debugfs directory [ 546.916775][ T49] Bluetooth: hci4: command tx timeout [ 547.153882][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.161694][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.170304][ T7368] bridge_slave_0: entered allmulticast mode [ 547.180583][ T7368] bridge_slave_0: entered promiscuous mode [ 547.294057][ T5350] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 547.455161][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.462889][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.471397][ T7368] bridge_slave_1: entered allmulticast mode [ 547.481763][ T7368] bridge_slave_1: entered promiscuous mode [ 547.551825][ T5350] usb 10-1: Using ep0 maxpacket: 32 [ 547.579938][ T88] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.602342][ T5350] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 63, changing to 9 [ 547.614864][ T5350] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58089, setting to 1024 [ 547.627059][ T5350] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 547.638793][ T5350] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.733820][ T5350] usb 10-1: config 0 descriptor?? [ 548.162044][ T88] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.276387][ T5350] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 548.291931][ T7368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.462279][ T88] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.484447][ T5867] usb 10-1: USB disconnect, device number 2 [ 548.605970][ T7368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.720080][ T88] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.984853][ T49] Bluetooth: hci4: command tx timeout [ 549.155134][ T7408] fido_id[7408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 549.409436][ T7368] team0: Port device team_slave_0 added [ 549.549281][ T7368] team0: Port device team_slave_1 added [ 549.997429][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.004831][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.031496][ T7368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.277789][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.285228][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.314622][ T7368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.614017][ T88] bridge_slave_1: left allmulticast mode [ 550.620115][ T88] bridge_slave_1: left promiscuous mode [ 550.628061][ T88] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.693721][ T88] bridge_slave_0: left allmulticast mode [ 550.699734][ T88] bridge_slave_0: left promiscuous mode [ 550.710086][ T88] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.239248][ T88] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.259687][ T88] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.299906][ T88] bond0 (unregistering): Released all slaves [ 551.466489][ T30] audit: type=1326 audit(1751727818.058:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.578543][ T7274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.601656][ T30] audit: type=1326 audit(1751727818.108:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.625933][ T30] audit: type=1326 audit(1751727818.108:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.650013][ T30] audit: type=1326 audit(1751727818.128:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.672909][ T30] audit: type=1326 audit(1751727818.148:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.696765][ T30] audit: type=1326 audit(1751727818.158:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.719548][ T30] audit: type=1326 audit(1751727818.158:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.743617][ T30] audit: type=1326 audit(1751727818.158:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.766529][ T30] audit: type=1326 audit(1751727818.158:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 551.789609][ T30] audit: type=1326 audit(1751727818.188:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.9.279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 552.136365][ T7368] hsr_slave_0: entered promiscuous mode [ 552.150580][ T7368] hsr_slave_1: entered promiscuous mode [ 552.160592][ T7368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.168611][ T7368] Cannot create hsr debugfs directory [ 552.474146][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 552.507454][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 552.536185][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 552.571767][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 552.593901][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 553.171404][ T88] hsr_slave_0: left promiscuous mode [ 553.181839][ T88] hsr_slave_1: left promiscuous mode [ 553.195423][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.204922][ T88] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.236569][ T88] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.245160][ T88] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.305408][ T88] veth1_macvtap: left promiscuous mode [ 553.311278][ T88] veth0_macvtap: left promiscuous mode [ 553.319314][ T88] veth1_vlan: left promiscuous mode [ 553.325219][ T88] veth0_vlan: left promiscuous mode [ 554.242255][ T88] team0 (unregistering): Port device team_slave_1 removed [ 554.304389][ T88] team0 (unregistering): Port device team_slave_0 removed [ 554.726388][ T5812] Bluetooth: hci3: command tx timeout [ 555.047033][ T7349] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 555.130854][ T7349] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 555.222964][ T7349] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 555.380153][ T7349] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.796020][ T7274] veth0_vlan: entered promiscuous mode [ 556.144141][ T7274] veth1_vlan: entered promiscuous mode [ 556.747060][ T5812] Bluetooth: hci3: command tx timeout [ 556.887761][ T7274] veth0_macvtap: entered promiscuous mode [ 557.081153][ T7422] chnl_net:caif_netlink_parms(): no params data found [ 557.176409][ T7274] veth1_macvtap: entered promiscuous mode [ 557.830480][ T7349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.849424][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 557.934212][ T7274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.051940][ T7368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 558.107791][ T7274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.117419][ T7274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.126890][ T7274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.136165][ T7274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.176399][ T7349] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.196135][ T7368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 558.244574][ T7368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 558.311750][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.319603][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.377768][ T7368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 558.450302][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.458176][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.838561][ T5812] Bluetooth: hci3: command tx timeout [ 559.664610][ T7422] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.672355][ T7422] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.684029][ T7422] bridge_slave_0: entered allmulticast mode [ 559.695112][ T7422] bridge_slave_0: entered promiscuous mode [ 559.837824][ T7422] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.845755][ T7422] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.853880][ T7422] bridge_slave_1: entered allmulticast mode [ 559.864575][ T7422] bridge_slave_1: entered promiscuous mode [ 560.384459][ T7422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.501258][ T7422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.612870][ T7368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.903848][ T5812] Bluetooth: hci3: command tx timeout [ 561.031482][ T7422] team0: Port device team_slave_0 added [ 561.164509][ T7422] team0: Port device team_slave_1 added [ 561.491272][ T7368] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.686412][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.694228][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.728258][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.735697][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.762558][ T7422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.824224][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.831997][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.917783][ T7349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.009563][ T7422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.017001][ T7422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.045443][ T7422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.787864][ T7422] hsr_slave_0: entered promiscuous mode [ 562.801605][ T7422] hsr_slave_1: entered promiscuous mode [ 562.834996][ T7349] veth0_vlan: entered promiscuous mode [ 562.958334][ T7349] veth1_vlan: entered promiscuous mode [ 564.015006][ T7349] veth0_macvtap: entered promiscuous mode [ 564.165990][ T7349] veth1_macvtap: entered promiscuous mode [ 564.476185][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.825684][ T7349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.945523][ T7349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.955894][ T7349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.965365][ T7349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.974580][ T7349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.325806][ T7368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.491148][ T4871] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.779550][ T4871] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.051308][ T4871] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.260270][ T4871] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.937693][ T7422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 567.264409][ T7422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.325524][ T4871] bridge_slave_1: left allmulticast mode [ 567.331506][ T4871] bridge_slave_1: left promiscuous mode [ 567.338830][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.434336][ T4871] bridge_slave_0: left allmulticast mode [ 567.440308][ T4871] bridge_slave_0: left promiscuous mode [ 567.448179][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.036660][ T4871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.063284][ T4871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.098645][ T4871] bond0 (unregistering): Released all slaves [ 568.179608][ T7422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 568.304980][ T7422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 568.815966][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.824689][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.317576][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.325855][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.394013][ T4871] hsr_slave_0: left promiscuous mode [ 569.425294][ T4871] hsr_slave_1: left promiscuous mode [ 569.435947][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.443892][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.505044][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.512900][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.591065][ T4871] veth1_macvtap: left promiscuous mode [ 569.600309][ T4871] veth0_macvtap: left promiscuous mode [ 569.606596][ T4871] veth1_vlan: left promiscuous mode [ 569.612253][ T4871] veth0_vlan: left promiscuous mode [ 570.379822][ T4871] team0 (unregistering): Port device team_slave_1 removed [ 570.485729][ T4871] team0 (unregistering): Port device team_slave_0 removed [ 570.794211][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.805871][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.856841][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.871941][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.887231][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 571.993564][ T7368] veth0_vlan: entered promiscuous mode [ 572.189792][ T7368] veth1_vlan: entered promiscuous mode [ 572.835558][ T7368] veth0_macvtap: entered promiscuous mode [ 572.888932][ T7422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.964614][ T7368] veth1_macvtap: entered promiscuous mode [ 573.064864][ T5812] Bluetooth: hci1: command tx timeout [ 573.149164][ T7422] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.260171][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.268112][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.400727][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.469646][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.477444][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.582108][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.694114][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 573.840451][ T7368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.851154][ T7368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.861051][ T7368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.870306][ T7368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.165670][ T5812] Bluetooth: hci1: command tx timeout [ 575.815039][ T7579] loop2: detected capacity change from 0 to 256 [ 576.224464][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.232195][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.241182][ T7532] bridge_slave_0: entered allmulticast mode [ 576.251768][ T7532] bridge_slave_0: entered promiscuous mode [ 576.447330][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.455315][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.463438][ T7532] bridge_slave_1: entered allmulticast mode [ 576.473799][ T7532] bridge_slave_1: entered promiscuous mode [ 576.934515][ T6428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.942681][ T6428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.985206][ T7579] FAT-fs (loop2): Directory bread(block 64) failed [ 576.992098][ T7579] FAT-fs (loop2): Directory bread(block 65) failed [ 576.999758][ T7579] FAT-fs (loop2): Directory bread(block 66) failed [ 577.006810][ T7579] FAT-fs (loop2): Directory bread(block 67) failed [ 577.014077][ T7579] FAT-fs (loop2): Directory bread(block 68) failed [ 577.020911][ T7579] FAT-fs (loop2): Directory bread(block 69) failed [ 577.030441][ T7579] FAT-fs (loop2): Directory bread(block 70) failed [ 577.037849][ T7579] FAT-fs (loop2): Directory bread(block 71) failed [ 577.045694][ T7579] FAT-fs (loop2): Directory bread(block 72) failed [ 577.052518][ T7579] FAT-fs (loop2): Directory bread(block 73) failed [ 577.111329][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.201092][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.235937][ T5812] Bluetooth: hci1: command tx timeout [ 577.445216][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.453704][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.471305][ T7422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.663782][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 577.663874][ T30] audit: type=1326 audit(1751727844.248:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 577.716766][ T7579] syz.2.288: attempt to access beyond end of device [ 577.716766][ T7579] loop2: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 577.731560][ T7579] syz.2.288: attempt to access beyond end of device [ 577.731560][ T7579] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 577.792917][ T30] audit: type=1326 audit(1751727844.318:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 577.816089][ T30] audit: type=1800 audit(1751727844.348:87): pid=7579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.288" name="file1" dev="loop2" ino=1048648 res=0 errno=0 [ 577.854522][ T7532] team0: Port device team_slave_0 added [ 578.063507][ T30] audit: type=1326 audit(1751727844.508:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 578.087529][ T30] audit: type=1326 audit(1751727844.538:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.288" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 578.142883][ T7532] team0: Port device team_slave_1 added [ 578.630282][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.637797][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.666450][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.820372][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.834813][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.862285][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.324968][ T5812] Bluetooth: hci1: command tx timeout [ 579.613906][ T7603] loop1: detected capacity change from 0 to 512 [ 579.712897][ T7532] hsr_slave_0: entered promiscuous mode [ 579.717215][ T7603] EXT4-fs: Ignoring removed mblk_io_submit option [ 579.726699][ T7532] hsr_slave_1: entered promiscuous mode [ 579.741011][ T7532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.748998][ T7532] Cannot create hsr debugfs directory [ 579.845358][ T7603] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.855070][ T7603] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 579.907688][ T7603] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 580.031362][ T7603] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 580.114554][ T7603] System zones: 0-2, 18-18, 34-34 [ 580.124468][ T7603] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.289: iget: bad i_size value: 360287970189639680 [ 580.155126][ T7603] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.289: couldn't read orphan inode 15 (err -117) [ 580.276084][ T7603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.676177][ T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 580.881115][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 580.930978][ T11] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 580.939518][ T11] usb 2-1: config 0 has no interface number 0 [ 580.946254][ T11] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 170, changing to 11 [ 580.957989][ T11] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid maxpacket 58593, setting to 1024 [ 581.074514][ T11] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 581.085181][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.093805][ T11] usb 2-1: Product: syz [ 581.098256][ T11] usb 2-1: Manufacturer: syz [ 581.103339][ T11] usb 2-1: SerialNumber: syz [ 581.156592][ T11] usb 2-1: config 0 descriptor?? [ 581.164617][ T7603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 581.230469][ T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.494095][ T7422] veth0_vlan: entered promiscuous mode [ 581.519305][ T11] usb 2-1: USB disconnect, device number 3 [ 581.806554][ T7422] veth1_vlan: entered promiscuous mode [ 581.972612][ T7619] udevd[7619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.474063][ T7349] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.718624][ T7422] veth0_macvtap: entered promiscuous mode [ 582.801386][ T7422] veth1_macvtap: entered promiscuous mode [ 583.115937][ T7532] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 583.192422][ T7532] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 583.293996][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.349395][ T7532] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 583.455982][ T7532] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.528521][ T7422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.686008][ T7422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.695644][ T7422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.704943][ T7422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.714185][ T7422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.213937][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.221974][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.665430][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.674768][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.259515][ T3528] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.530368][ T3528] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.810629][ T3528] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.059460][ T3528] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.262064][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.497979][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.010005][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.018288][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.174400][ T3528] bridge_slave_1: left allmulticast mode [ 587.180472][ T3528] bridge_slave_1: left promiscuous mode [ 587.187680][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.290527][ T3528] bridge_slave_0: left allmulticast mode [ 587.297039][ T3528] bridge_slave_0: left promiscuous mode [ 587.304397][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.195771][ T3528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.265696][ T3528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.312516][ T3528] bond0 (unregistering): Released all slaves [ 588.440622][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.448450][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.392597][ T3528] hsr_slave_0: left promiscuous mode [ 589.401520][ T3528] hsr_slave_1: left promiscuous mode [ 589.410832][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.420249][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.501453][ T3528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.509625][ T3528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.606604][ T3528] veth1_macvtap: left promiscuous mode [ 589.612471][ T3528] veth0_macvtap: left promiscuous mode [ 589.620493][ T3528] veth1_vlan: left promiscuous mode [ 589.626498][ T3528] veth0_vlan: left promiscuous mode [ 590.874647][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.888436][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.898465][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.916237][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.929028][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 591.034190][ T3528] team0 (unregistering): Port device team_slave_1 removed [ 591.067384][ T3528] team0 (unregistering): Port device team_slave_0 removed [ 591.590484][ T7661] netlink: 360 bytes leftover after parsing attributes in process `syz.4.295'. [ 592.554923][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 592.599461][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 592.621253][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 592.724140][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 592.766165][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 593.074932][ T5812] Bluetooth: hci0: command tx timeout [ 593.774110][ T7662] chnl_net:caif_netlink_parms(): no params data found [ 594.603890][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.904979][ T5812] Bluetooth: hci5: command tx timeout [ 595.145156][ T5812] Bluetooth: hci0: command tx timeout [ 595.525722][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 596.354482][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.362300][ T7662] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.372468][ T7662] bridge_slave_0: entered allmulticast mode [ 596.384662][ T7662] bridge_slave_0: entered promiscuous mode [ 596.518527][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.526506][ T7662] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.534751][ T7662] bridge_slave_1: entered allmulticast mode [ 596.545229][ T7662] bridge_slave_1: entered promiscuous mode [ 596.992093][ T5812] Bluetooth: hci5: command tx timeout [ 597.092216][ T7662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.220702][ T7662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.234818][ T5812] Bluetooth: hci0: command tx timeout [ 597.621665][ T7662] team0: Port device team_slave_0 added [ 597.666952][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.675411][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.781619][ T7662] team0: Port device team_slave_1 added [ 598.400884][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.407933][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.517456][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.526103][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.556774][ T7662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.572541][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.582268][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.619820][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.627789][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.640724][ T7673] bridge_slave_0: entered allmulticast mode [ 598.651178][ T7673] bridge_slave_0: entered promiscuous mode [ 598.771392][ T7662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.780442][ T7662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.807427][ T7662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.854781][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.862621][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.872783][ T7673] bridge_slave_1: entered allmulticast mode [ 598.883597][ T7673] bridge_slave_1: entered promiscuous mode [ 599.078982][ T5812] Bluetooth: hci5: command tx timeout [ 599.304005][ T5812] Bluetooth: hci0: command tx timeout [ 599.455740][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.854016][ T7723] loop5: detected capacity change from 0 to 512 [ 599.905330][ T7532] veth0_vlan: entered promiscuous mode [ 599.928172][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.976826][ T7662] hsr_slave_0: entered promiscuous mode [ 599.988193][ T7662] hsr_slave_1: entered promiscuous mode [ 599.997698][ T7662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.005637][ T7662] Cannot create hsr debugfs directory [ 600.288921][ T7723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.303502][ T7723] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.361644][ T7532] veth1_vlan: entered promiscuous mode [ 600.465409][ T7673] team0: Port device team_slave_0 added [ 600.732863][ T7673] team0: Port device team_slave_1 added [ 601.144241][ T5812] Bluetooth: hci5: command tx timeout [ 601.427923][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.435430][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.462608][ T7673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.902887][ T7532] veth0_macvtap: entered promiscuous mode [ 601.934545][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.941788][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.968513][ T7673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.079765][ T7532] veth1_macvtap: entered promiscuous mode [ 602.698968][ T7673] hsr_slave_0: entered promiscuous mode [ 602.710470][ T7673] hsr_slave_1: entered promiscuous mode [ 602.720301][ T7673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.731976][ T7673] Cannot create hsr debugfs directory [ 602.780219][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.972011][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.286277][ T7532] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.295836][ T7532] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.305214][ T7532] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.314435][ T7532] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.195531][ T7662] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 604.230822][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.354308][ T7662] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 604.491450][ T7662] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 604.635537][ T7662] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 606.239400][ T7673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 606.406773][ T7673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 606.534288][ T7673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 606.644071][ T7662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.703344][ T7673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 606.824567][ T7662] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.988324][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.996115][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.138843][ T7755] loop4: detected capacity change from 0 to 1024 [ 607.174588][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.182254][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.567432][ T7755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.582022][ T7755] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.569368][ T7368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.208797][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.678352][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.797103][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.303'. [ 609.830131][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.073377][ T7777] bridge_slave_1 (unregistering): left allmulticast mode [ 610.080784][ T7777] bridge_slave_1 (unregistering): left promiscuous mode [ 610.092165][ T7777] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.414042][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.421778][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.586229][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.594015][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.166032][ T7662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.476391][ T7799] loop5: detected capacity change from 0 to 512 [ 612.589060][ T7799] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 614.151024][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.852918][ T7810] loop5: detected capacity change from 0 to 4096 [ 615.043078][ T7673] veth0_vlan: entered promiscuous mode [ 615.179715][ T7673] veth1_vlan: entered promiscuous mode [ 615.279249][ T7810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.997518][ T7673] veth0_macvtap: entered promiscuous mode [ 616.155895][ T7673] veth1_macvtap: entered promiscuous mode [ 616.185857][ T7662] veth0_vlan: entered promiscuous mode [ 616.489744][ T7662] veth1_vlan: entered promiscuous mode [ 616.598775][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.647376][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.822386][ T4871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.830977][ T4871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.898394][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.297903][ T7673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.309340][ T7673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.318647][ T7673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.327895][ T7673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.446086][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.454807][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.567517][ T7824] loop4: detected capacity change from 0 to 128 [ 617.862400][ T7662] veth0_macvtap: entered promiscuous mode [ 618.005938][ T7662] veth1_macvtap: entered promiscuous mode [ 618.055871][ T30] audit: type=1800 audit(1751727884.628:90): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.308" name="bus" dev="loop4" ino=1048665 res=0 errno=0 [ 618.401526][ T7662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.566474][ T7662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.752727][ T7662] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.762156][ T7662] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.771584][ T7662] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.780899][ T7662] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.872741][ T7836] loop6: detected capacity change from 0 to 8192 [ 621.236223][ T30] audit: type=1804 audit(1751727887.808:91): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.286" name="/newroot/0/file2/bus" dev="loop6" ino=1048666 res=1 errno=0 [ 621.259176][ T30] audit: type=1800 audit(1751727887.808:92): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.286" name="bus" dev="loop6" ino=1048666 res=0 errno=0 [ 624.802596][ T7874] loop4: detected capacity change from 0 to 512 [ 627.003584][ T2014] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 627.065138][ T30] audit: type=1326 audit(1751727893.638:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.6.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 627.088079][ T30] audit: type=1326 audit(1751727893.638:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.6.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 627.114431][ T30] audit: type=1326 audit(1751727893.668:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.6.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=96 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 627.138312][ T30] audit: type=1326 audit(1751727893.668:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.6.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 627.164442][ T30] audit: type=1326 audit(1751727893.698:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.6.318" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 627.258256][ T2014] usb 6-1: Using ep0 maxpacket: 32 [ 627.294344][ T2014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.309806][ T2014] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.321347][ T2014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 627.329487][ T2014] usb 6-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 627.339121][ T2014] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.647487][ T2014] usb 6-1: config 0 descriptor?? [ 628.572545][ T2014] wacom 0003:056A:0057.0006: item fetching failed at offset 5/6 [ 628.645221][ T2014] wacom 0003:056A:0057.0006: parse failed [ 628.651720][ T2014] wacom 0003:056A:0057.0006: probe with driver wacom failed with error -22 [ 629.046837][ T5350] usb 6-1: USB disconnect, device number 4 [ 633.424923][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.433376][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.685394][ T6428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.694172][ T6428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.358151][ T8001] overlayfs: missing 'lowerdir' [ 634.728522][ T7976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.737983][ T7976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.909904][ T7959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.918719][ T7959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.952378][ T8002] loop5: detected capacity change from 0 to 2048 [ 637.622226][ T8020] loop4: detected capacity change from 0 to 1024 [ 637.860175][ T8020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.874164][ T8020] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.831420][ T7368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.133993][ T8033] loop4: detected capacity change from 0 to 256 [ 640.199191][ T8033] exfat: Deprecated parameter 'namecase' [ 640.212001][ T8033] exfat: Deprecated parameter 'namecase' [ 640.453833][ T8033] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 644.523502][ T5350] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 644.743584][ T5350] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 644.753399][ T5350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.887494][ T5350] usb 5-1: config 0 descriptor?? [ 645.283544][ T30] audit: type=1326 audit(1751727911.868:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 645.306306][ T30] audit: type=1326 audit(1751727911.868:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 645.333403][ T30] audit: type=1326 audit(1751727911.888:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 645.358494][ T30] audit: type=1326 audit(1751727911.888:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 645.657156][ T5350] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 645.668467][ T5350] asix 5-1:0.0: probe with driver asix failed with error -32 [ 645.772230][ T30] audit: type=1326 audit(1751727912.058:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8050 comm="syz.3.332" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 646.227319][ T8070] loop5: detected capacity change from 0 to 2048 [ 646.420945][ T8070] loop5: p1 < > p3 [ 646.504404][ T49] Bluetooth: hci2: command 0x0406 tx timeout [ 646.620068][ T8070] loop5: p3 size 134217728 extends beyond EOD, truncated [ 647.902028][ T2014] usb 5-1: USB disconnect, device number 4 [ 648.172882][ T30] audit: type=1326 audit(1751727914.768:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 648.406862][ T30] audit: type=1326 audit(1751727914.838:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 648.429771][ T30] audit: type=1326 audit(1751727914.838:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 648.452420][ T30] audit: type=1326 audit(1751727914.838:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 648.475092][ T30] audit: type=1326 audit(1751727914.918:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.5.338" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 650.886585][ T8096] Bluetooth: MGMT ver 1.23 [ 651.233717][ T2014] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 651.497941][ T2014] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.508620][ T2014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 651.520451][ T2014] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 651.530663][ T2014] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.545389][ T2014] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 651.554848][ T2014] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.976747][ T2014] usb 7-1: config 0 descriptor?? [ 652.110207][ T2014] gspca_main: spca561-2.14.0 probing abcd:cdee [ 652.267721][ T2014] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 652.279858][ T2014] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.297725][ T2014] usb 7-1: MIDIStreaming interface descriptor not found [ 652.733907][ T2014] usb 7-1: USB disconnect, device number 2 [ 654.683644][ T5350] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 654.993478][ T5350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.005122][ T5350] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.015498][ T5350] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 655.025172][ T5350] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.296414][ T5350] usb 7-1: config 0 descriptor?? [ 655.496125][ T8128] loop8: detected capacity change from 0 to 128 [ 655.919652][ T5350] kone 0003:1E7D:2CED.0007: unknown main item tag 0x2 [ 655.927572][ T5350] kone 0003:1E7D:2CED.0007: item fetching failed at offset 4/5 [ 656.135279][ T5350] kone 0003:1E7D:2CED.0007: parse failed [ 656.141783][ T5350] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -22 [ 656.319394][ T5350] usb 7-1: USB disconnect, device number 3 [ 658.846466][ T8148] loop6: detected capacity change from 0 to 256 [ 659.617000][ T8148] FAT-fs (loop6): Directory bread(block 64) failed [ 659.624228][ T8148] FAT-fs (loop6): Directory bread(block 65) failed [ 659.631229][ T8148] FAT-fs (loop6): Directory bread(block 66) failed [ 659.638668][ T8148] FAT-fs (loop6): Directory bread(block 67) failed [ 659.645827][ T8148] FAT-fs (loop6): Directory bread(block 68) failed [ 659.652658][ T8148] FAT-fs (loop6): Directory bread(block 69) failed [ 659.665915][ T8148] FAT-fs (loop6): Directory bread(block 70) failed [ 659.672747][ T8148] FAT-fs (loop6): Directory bread(block 71) failed [ 659.681959][ T8148] FAT-fs (loop6): Directory bread(block 72) failed [ 659.689252][ T8148] FAT-fs (loop6): Directory bread(block 73) failed [ 659.875168][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.881975][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.435441][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 660.446290][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 660.476526][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 660.499506][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 660.563970][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 660.722585][ T32] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 660.987476][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 661.176148][ T32] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.188689][ T32] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.355041][ T32] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.365063][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.373519][ T32] usb 7-1: Product: syz [ 661.377975][ T32] usb 7-1: Manufacturer: syz [ 661.382863][ T32] usb 7-1: SerialNumber: syz [ 662.331612][ T32] usb 7-1: can't set config #1, error -71 [ 662.412754][ T32] usb 7-1: USB disconnect, device number 4 [ 662.668627][ T49] Bluetooth: hci6: command tx timeout [ 662.967291][ T8172] overlayfs: failed to resolve './file1': -2 [ 663.914280][ T8156] chnl_net:caif_netlink_parms(): no params data found [ 664.743977][ T49] Bluetooth: hci6: command tx timeout [ 666.404534][ T8204] tipc: Started in network mode [ 666.409830][ T8204] tipc: Node identity ac14140f, cluster identity 4711 [ 666.429390][ T8204] tipc: New replicast peer: 255.255.255.255 [ 666.442137][ T8204] tipc: Enabled bearer , priority 10 [ 666.464906][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 666.464995][ T30] audit: type=1326 audit(1751727933.058:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.8.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 666.494837][ T30] audit: type=1326 audit(1751727933.058:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8201 comm="syz.8.368" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 666.904122][ T5812] Bluetooth: hci6: command tx timeout [ 666.983438][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 667.555223][ T5350] tipc: Node number set to 2886997007 [ 668.187771][ T8156] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.196069][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.204867][ T8156] bridge_slave_0: entered allmulticast mode [ 668.215455][ T8156] bridge_slave_0: entered promiscuous mode [ 668.407385][ T8220] pim6reg1: entered promiscuous mode [ 668.413297][ T8220] pim6reg1: entered allmulticast mode [ 668.485574][ T8156] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.498207][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.506804][ T8156] bridge_slave_1: entered allmulticast mode [ 668.517564][ T8156] bridge_slave_1: entered promiscuous mode [ 668.994361][ T49] Bluetooth: hci6: command tx timeout [ 669.425307][ T8156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.682020][ T8156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.588854][ T8156] team0: Port device team_slave_0 added [ 670.639775][ T8235] loop5: detected capacity change from 0 to 1024 [ 670.688673][ T8156] team0: Port device team_slave_1 added [ 670.977168][ T8235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.990612][ T8235] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.266878][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.377'. [ 671.276605][ T7724] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 671.378661][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.377'. [ 671.434646][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.448123][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.476987][ T8156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.556359][ T7724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 671.568015][ T7724] usb 7-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 671.577726][ T7724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.634395][ T7724] usb 7-1: config 0 descriptor?? [ 671.651939][ T8241] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 672.082130][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.238619][ T8156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.246286][ T8156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 672.279315][ T8156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.364627][ T7724] wacom 0003:056A:0029.0008: unknown main item tag 0x2 [ 672.382593][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.514943][ T7724] usb 7-1: USB disconnect, device number 5 [ 672.745527][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.985930][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.013246][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.016746][ T8156] hsr_slave_0: entered promiscuous mode [ 674.028642][ T8156] hsr_slave_1: entered promiscuous mode [ 674.038285][ T8156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.046302][ T8156] Cannot create hsr debugfs directory [ 674.372214][ T8255] loop6: detected capacity change from 0 to 256 [ 674.419154][ T12] bridge_slave_1: left allmulticast mode [ 674.425592][ T12] bridge_slave_1: left promiscuous mode [ 674.432363][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.590268][ T12] bridge_slave_0: left allmulticast mode [ 674.596802][ T12] bridge_slave_0: left promiscuous mode [ 674.603999][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.487251][ T8255] FAT-fs (loop6): Directory bread(block 64) failed [ 675.494417][ T8255] FAT-fs (loop6): Directory bread(block 65) failed [ 675.501450][ T8255] FAT-fs (loop6): Directory bread(block 66) failed [ 675.508596][ T8255] FAT-fs (loop6): Directory bread(block 67) failed [ 675.515890][ T8255] FAT-fs (loop6): Directory bread(block 68) failed [ 675.522719][ T8255] FAT-fs (loop6): Directory bread(block 69) failed [ 675.529842][ T8255] FAT-fs (loop6): Directory bread(block 70) failed [ 675.545156][ T8255] FAT-fs (loop6): Directory bread(block 71) failed [ 675.552617][ T8255] FAT-fs (loop6): Directory bread(block 72) failed [ 675.562164][ T8255] FAT-fs (loop6): Directory bread(block 73) failed [ 676.905564][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.080282][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.212540][ T12] bond0 (unregistering): Released all slaves [ 677.311569][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 679.333478][ T12] hsr_slave_0: left promiscuous mode [ 679.395360][ T12] hsr_slave_1: left promiscuous mode [ 679.404406][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.412246][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.559315][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.567400][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.588931][ T8282] loop6: detected capacity change from 0 to 8192 [ 679.809643][ T12] veth1_macvtap: left promiscuous mode [ 679.816195][ T12] veth0_macvtap: left promiscuous mode [ 679.822340][ T12] veth1_vlan: left promiscuous mode [ 679.828400][ T12] veth0_vlan: left promiscuous mode [ 680.507060][ T8295] loop8: detected capacity change from 0 to 256 [ 680.840801][ T8295] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 680.855868][ T8295] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 682.617639][ T12] team0 (unregistering): Port device team_slave_1 removed [ 682.786949][ T12] team0 (unregistering): Port device team_slave_0 removed [ 686.669992][ T8156] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 686.683438][ T32] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 686.835730][ T8156] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 686.935972][ T32] usb 6-1: Using ep0 maxpacket: 8 [ 686.974963][ T8156] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 687.021207][ T32] usb 6-1: config 187 has an invalid interface number: 232 but max is 0 [ 687.030436][ T32] usb 6-1: config 187 has no interface number 0 [ 687.037392][ T32] usb 6-1: config 187 interface 232 has no altsetting 0 [ 687.137933][ T8156] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 687.156891][ T32] usb 6-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=1a.05 [ 687.166533][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.175246][ T32] usb 6-1: Product: syz [ 687.180059][ T32] usb 6-1: Manufacturer: syz [ 687.185205][ T32] usb 6-1: SerialNumber: syz [ 687.840624][ T32] usb 6-1: Found UVC 0.00 device syz (1871:0306) [ 687.849226][ T32] usb 6-1: No valid video chain found. [ 687.926463][ T32] usb 6-1: USB disconnect, device number 5 [ 689.453328][ T8156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.597978][ T30] audit: type=1326 audit(1751727956.168:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.8.401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 689.621327][ T30] audit: type=1326 audit(1751727956.168:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.8.401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 689.644082][ T30] audit: type=1326 audit(1751727956.178:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.8.401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 689.670882][ T30] audit: type=1326 audit(1751727956.178:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.8.401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 689.695028][ T30] audit: type=1326 audit(1751727956.178:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8335 comm="syz.8.401" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 689.812584][ T8156] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.929263][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.937373][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.185142][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.192836][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.940301][ T8156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.098704][ T8374] loop6: detected capacity change from 0 to 512 [ 695.598815][ T8374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.618289][ T8374] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 697.299899][ T4871] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.570808][ T4871] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.714084][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 697.879860][ T4871] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.159126][ T4871] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.941373][ T8156] veth0_vlan: entered promiscuous mode [ 699.129526][ T8156] veth1_vlan: entered promiscuous mode [ 699.369653][ T4871] bridge_slave_1: left allmulticast mode [ 699.375842][ T4871] bridge_slave_1: left promiscuous mode [ 699.382715][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.575293][ T4871] bridge_slave_0: left allmulticast mode [ 699.581288][ T4871] bridge_slave_0: left promiscuous mode [ 699.589089][ T4871] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.878805][ T7532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.297920][ T4871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 700.448525][ T4871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.501068][ T4871] bond0 (unregistering): Released all slaves [ 701.241929][ T8156] veth0_macvtap: entered promiscuous mode [ 701.669284][ T8156] veth1_macvtap: entered promiscuous mode [ 701.764209][ T8415] loop5: detected capacity change from 0 to 512 [ 701.944244][ T4871] hsr_slave_0: left promiscuous mode [ 701.991101][ T4871] hsr_slave_1: left promiscuous mode [ 701.999721][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.008160][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.063797][ T4871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.071664][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.172359][ T8415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 702.186021][ T8415] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 702.210311][ T4871] veth1_macvtap: left promiscuous mode [ 702.216621][ T4871] veth0_macvtap: left promiscuous mode [ 702.222642][ T4871] veth1_vlan: left promiscuous mode [ 702.230449][ T4871] veth0_vlan: left promiscuous mode [ 702.993908][ T8424] loop8: detected capacity change from 0 to 16 [ 703.047779][ T8424] erofs (device loop8): mounted with root inode @ nid 36. [ 703.325633][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 703.670258][ T4871] team0 (unregistering): Port device team_slave_1 removed [ 703.876943][ T4871] team0 (unregistering): Port device team_slave_0 removed [ 705.008834][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.207712][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.389577][ T8156] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.399707][ T8156] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.409022][ T8156] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.418375][ T8156] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.974151][ T8441] loop8: detected capacity change from 0 to 2048 [ 708.222762][ T8441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.236341][ T8441] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.453908][ T32] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 708.742554][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.753484][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.873802][ T32] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 708.883397][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 708.891737][ T32] usb 5-1: SerialNumber: syz [ 710.373975][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.385788][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.429629][ T8450] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 711.087893][ T32] usb 5-1: 0:2 : does not exist [ 711.093875][ T32] usb 5-1: unit 5 not found! [ 711.384593][ T32] usb 5-1: USB disconnect, device number 5 [ 711.812252][ T8127] udevd[8127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.906586][ T7662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.525231][ T7976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.536096][ T7976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.662274][ T8507] loop6: detected capacity change from 0 to 16 [ 717.794323][ T8507] erofs (device loop6): mounted with root inode @ nid 36. [ 717.887808][ T8507] erofs (device loop6): invalid de[0].nameoff 0 @ nid 36 [ 718.053548][ T1556] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 718.189182][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 718.298027][ T1556] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 718.308817][ T1556] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 718.414307][ T1556] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 718.427425][ T1556] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 718.436561][ T1556] usb 6-1: SerialNumber: syz [ 719.702579][ T1556] usb 6-1: 0:2 : does not exist [ 719.708189][ T1556] usb 6-1: unit 5 not found! [ 720.012198][ T1556] usb 6-1: USB disconnect, device number 6 [ 720.104618][ T7724] kernel write not supported for file bpf-prog (pid: 7724 comm: kworker/0:8) [ 720.364109][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.391058][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.417453][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.450690][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.493105][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.628421][ T8127] udevd[8127]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.257124][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.264028][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.000849][ T30] audit: type=1326 audit(1751728244.592:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.181942][ T30] audit: type=1326 audit(1751728244.682:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=266 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.205338][ T30] audit: type=1326 audit(1751728244.692:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.232197][ T30] audit: type=1326 audit(1751728244.692:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.257507][ T30] audit: type=1326 audit(1751728244.692:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.280906][ T30] audit: type=1326 audit(1751728244.692:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.305445][ T30] audit: type=1326 audit(1751728244.692:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.341526][ T30] audit: type=1326 audit(1751728244.702:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.365202][ T30] audit: type=1326 audit(1751728244.702:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.389361][ T30] audit: type=1326 audit(1751728244.712:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.5.449" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 722.673900][ T49] Bluetooth: hci2: command tx timeout [ 722.955987][ T8540] syz.5.449 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 724.104035][ T8522] chnl_net:caif_netlink_parms(): no params data found [ 724.763261][ T49] Bluetooth: hci2: command tx timeout [ 725.101743][ T8556] loop5: detected capacity change from 0 to 1024 [ 725.173588][ T8556] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 725.225185][ T8556] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 725.279762][ T8556] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 725.307485][ T8556] EXT4-fs (loop5): orphan cleanup on readonly fs [ 725.592679][ T8556] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz.5.454: Invalid inode table block 0 in block_group 0 [ 725.654555][ T8556] EXT4-fs (loop5): Remounting filesystem read-only [ 725.662273][ T8556] EXT4-fs (loop5): 1 truncate cleaned up [ 725.783750][ T8556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 726.086295][ T8564] loop8: detected capacity change from 0 to 2048 [ 726.140713][ T7959] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.167385][ T8564] ext4: Unknown parameter 'nouser_xattr' [ 726.436051][ T7959] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.576406][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.719234][ T7959] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.838038][ T49] Bluetooth: hci2: command tx timeout [ 727.012753][ T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 727.359209][ T7959] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.391112][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.401874][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.577784][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 727.587366][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 727.596033][ T24] usb 5-1: SerialNumber: syz [ 727.808171][ T8582] capability: warning: `syz.8.461' uses 32-bit capabilities (legacy support in use) [ 727.870855][ T8522] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.878755][ T8522] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.887034][ T8522] bridge_slave_0: entered allmulticast mode [ 727.897327][ T8522] bridge_slave_0: entered promiscuous mode [ 728.193814][ T8522] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.201515][ T8522] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.209857][ T8522] bridge_slave_1: entered allmulticast mode [ 728.220078][ T8522] bridge_slave_1: entered promiscuous mode [ 728.793619][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 728.793708][ T30] audit: type=1326 audit(1751728251.392:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 728.906227][ T49] Bluetooth: hci2: command tx timeout [ 729.159086][ T30] audit: type=1326 audit(1751728251.462:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.181884][ T30] audit: type=1326 audit(1751728251.472:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.214098][ T30] audit: type=1326 audit(1751728251.532:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.242319][ T30] audit: type=1326 audit(1751728251.532:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.265582][ T30] audit: type=1326 audit(1751728251.582:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.288078][ T30] audit: type=1326 audit(1751728251.622:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.315667][ T30] audit: type=1326 audit(1751728251.712:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.339896][ T30] audit: type=1326 audit(1751728251.712:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 729.362393][ T30] audit: type=1326 audit(1751728251.752:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.6.462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fa2539 code=0x7ffc0000 [ 730.070841][ T7959] bridge_slave_1: left allmulticast mode [ 730.078407][ T7959] bridge_slave_1: left promiscuous mode [ 730.085497][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.093418][ T24] usb 5-1: 0:2 : does not exist [ 730.098654][ T24] usb 5-1: unit 5 not found! [ 730.237428][ T7959] bridge_slave_0: left allmulticast mode [ 730.244769][ T7959] bridge_slave_0: left promiscuous mode [ 730.251584][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.428749][ T24] usb 5-1: USB disconnect, device number 6 [ 731.002181][ T8127] udevd[8127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.626189][ T7959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.692010][ T7959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.732255][ T8609] loop6: detected capacity change from 0 to 512 [ 731.799832][ T7959] bond0 (unregistering): Released all slaves [ 731.958560][ T8522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.155595][ T8522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.035606][ T8522] team0: Port device team_slave_0 added [ 733.157989][ T8522] team0: Port device team_slave_1 added [ 733.236258][ T8610] loop4: detected capacity change from 0 to 8192 [ 733.308311][ T8610] vfat: Unknown parameter '18446744073709551615ÿÿÿÿ' [ 733.325132][ T7959] hsr_slave_0: left promiscuous mode [ 733.365079][ T7959] hsr_slave_1: left promiscuous mode [ 733.374201][ T7959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.382016][ T7959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.457602][ T7959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.466651][ T7959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.655357][ T7959] veth1_macvtap: left promiscuous mode [ 733.661472][ T7959] veth0_macvtap: left promiscuous mode [ 733.668179][ T7959] veth1_vlan: left promiscuous mode [ 733.674120][ T7959] veth0_vlan: left promiscuous mode [ 735.241576][ T7959] team0 (unregistering): Port device team_slave_1 removed [ 735.441656][ T7959] team0 (unregistering): Port device team_slave_0 removed [ 737.134433][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.141810][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.169112][ T8522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.459530][ T8522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.467149][ T8522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.498581][ T8522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.753209][ T8642] loop5: detected capacity change from 0 to 128 [ 737.907801][ T8642] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0101) [ 737.916434][ T8642] FAT-fs (loop5): Filesystem has been set read-only [ 739.004028][ T8522] hsr_slave_0: entered promiscuous mode [ 739.015240][ T8522] hsr_slave_1: entered promiscuous mode [ 739.031288][ T8522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.039283][ T8522] Cannot create hsr debugfs directory [ 740.867009][ T8655] loop6: detected capacity change from 0 to 4096 [ 741.246340][ T8655] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.437983][ T8522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 742.531861][ T8522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 742.594780][ T8522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 742.696260][ T8522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 742.774679][ T7532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.851200][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 743.851291][ T30] audit: type=1326 audit(1751728266.452:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 743.881176][ T30] audit: type=1326 audit(1751728266.452:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 743.905644][ T30] audit: type=1326 audit(1751728266.462:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 743.929402][ T30] audit: type=1326 audit(1751728266.462:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 743.955653][ T30] audit: type=1326 audit(1751728266.462:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 743.979681][ T30] audit: type=1326 audit(1751728266.512:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 744.002344][ T30] audit: type=1326 audit(1751728266.512:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8678 comm="syz.5.484" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8539 code=0x7ffc0000 [ 744.432693][ T8522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.629123][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.826131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.834104][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.002794][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.010607][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.137880][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.8.486'. [ 746.298779][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.486'. [ 747.675412][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.489'. [ 747.708284][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.990809][ T8701] bridge_slave_1 (unregistering): left allmulticast mode [ 747.998385][ T8701] bridge_slave_1 (unregistering): left promiscuous mode [ 748.006384][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.093975][ T24] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 748.334082][ T24] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 748.346624][ T24] usb 6-1: config 0 has no interface number 0 [ 748.434213][ T24] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 748.448495][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.461399][ T24] usb 6-1: Product: syz [ 748.466028][ T24] usb 6-1: Manufacturer: syz [ 748.470933][ T24] usb 6-1: SerialNumber: syz [ 748.507260][ T24] usb 6-1: config 0 descriptor?? [ 748.578916][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.008896][ T24] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 749.019527][ T24] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 749.030727][ T24] asix 6-1:0.251: probe with driver asix failed with error -5 [ 749.274142][ T24] usb 6-1: USB disconnect, device number 7 [ 751.351962][ T8729] veth0_vlan: entered allmulticast mode [ 752.593486][ T8522] veth0_vlan: entered promiscuous mode [ 752.739489][ T8522] veth1_vlan: entered promiscuous mode [ 753.250510][ T8522] veth0_macvtap: entered promiscuous mode [ 753.402225][ T8522] veth1_macvtap: entered promiscuous mode [ 753.778777][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.890366][ T8522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.997202][ T8522] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.007444][ T8522] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.017082][ T8522] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.026512][ T8522] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.268907][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 757.304338][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 757.306208][ T5812] Bluetooth: hci5: command 0x1003 tx timeout [ 758.331180][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.503'. [ 758.368048][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.465702][ T8773] bridge_slave_1 (unregistering): left allmulticast mode [ 758.473367][ T8773] bridge_slave_1 (unregistering): left promiscuous mode [ 758.487793][ T8773] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.397049][ T30] audit: type=1326 audit(1751728283.992:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 761.513580][ T30] audit: type=1326 audit(1751728284.022:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 761.537340][ T30] audit: type=1326 audit(1751728284.032:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.4.507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000 [ 764.229452][ T7930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.238597][ T7930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.608241][ T7953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.616732][ T7953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.961384][ T8819] loop5: detected capacity change from 0 to 1024 [ 765.097772][ T8819] EXT4-fs: Ignoring removed orlov option [ 765.104398][ T8819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 765.457079][ T8819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.207737][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.513'. [ 766.840704][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.315020][ T1556] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 768.552677][ T1556] usb 9-1: Using ep0 maxpacket: 16 [ 768.591860][ T1556] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.604518][ T1556] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 768.619867][ T1556] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 768.635284][ T1556] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 768.644953][ T1556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.813301][ T32] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 768.903433][ T1556] usb 9-1: config 0 descriptor?? [ 769.072548][ T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 769.084371][ T32] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 769.097765][ T32] usb 7-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 769.107314][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.527190][ T32] usb 7-1: config 0 descriptor?? [ 769.546495][ T8847] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 769.554709][ T1556] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 769.562369][ T1556] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 769.992631][ T1556] ===================================================== [ 770.000426][ T1556] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x5a1/0x2630 [ 770.008714][ T1556] usb_submit_urb+0x5a1/0x2630 [ 770.014271][ T1556] usb_start_wait_urb+0xc2/0x320 [ 770.019497][ T1556] usb_control_msg+0x27c/0x5b0 [ 770.024802][ T1556] usbhid_raw_request+0x4ab/0x690 [ 770.030114][ T1556] __hid_request+0x2bd/0x500 [ 770.035139][ T1556] hidinput_connect+0x3bf5/0x5cc0 [ 770.040466][ T1556] hid_connect+0x6b4/0x3440 [ 770.045646][ T1556] hid_hw_start+0xfc/0x1e0 [ 770.058865][ T1556] ms_probe+0x2e5/0x890 [ 770.065448][ T1556] hid_device_probe+0x536/0xab0 [ 770.070587][ T1556] really_probe+0x4d1/0xd90 [ 770.075567][ T1556] __driver_probe_device+0x268/0x380 [ 770.081150][ T1556] driver_probe_device+0x70/0x8b0 [ 770.086596][ T1556] __device_attach_driver+0x4ee/0x950 [ 770.092275][ T1556] bus_for_each_drv+0x3e3/0x680 [ 770.099634][ T1556] __device_attach+0x3c8/0x5c0 [ 770.105267][ T1556] device_initial_probe+0x33/0x40 [ 770.110609][ T1556] bus_probe_device+0x3ba/0x5e0 [ 770.115861][ T1556] device_add+0x12a9/0x1c10 [ 770.120626][ T1556] hid_add_device+0x5ed/0x7b0 [ 770.125760][ T1556] usbhid_probe+0x1fec/0x2660 [ 770.130725][ T1556] usb_probe_interface+0xd04/0x1310 [ 770.136315][ T1556] really_probe+0x4d1/0xd90 [ 770.141103][ T1556] __driver_probe_device+0x268/0x380 [ 770.146821][ T1556] driver_probe_device+0x70/0x8b0 [ 770.160459][ T1556] __device_attach_driver+0x4ee/0x950 [ 770.168823][ T1556] bus_for_each_drv+0x3e3/0x680 [ 770.174092][ T1556] __device_attach+0x3c8/0x5c0 [ 770.179132][ T1556] device_initial_probe+0x33/0x40 [ 770.184634][ T1556] bus_probe_device+0x3ba/0x5e0 [ 770.189743][ T1556] device_add+0x12a9/0x1c10 [ 770.194751][ T1556] usb_set_configuration+0x3493/0x3b70 [ 770.200514][ T1556] usb_generic_driver_probe+0xfc/0x290 [ 770.206467][ T1556] usb_probe_device+0x38a/0x690 [ 770.211546][ T1556] really_probe+0x4d1/0xd90 [ 770.216488][ T1556] __driver_probe_device+0x268/0x380 [ 770.222072][ T1556] driver_probe_device+0x70/0x8b0 [ 770.227542][ T1556] __device_attach_driver+0x4ee/0x950 [ 770.233340][ T1556] bus_for_each_drv+0x3e3/0x680 [ 770.238437][ T1556] __device_attach+0x3c8/0x5c0 [ 770.243618][ T1556] device_initial_probe+0x33/0x40 [ 770.248932][ T1556] bus_probe_device+0x3ba/0x5e0 [ 770.262291][ T1556] device_add+0x12a9/0x1c10 [ 770.269316][ T1556] usb_new_device+0x104b/0x20c0 [ 770.274594][ T1556] hub_event+0x5588/0x7580 [ 770.279311][ T1556] process_scheduled_works+0xb8e/0x1d80 [ 770.285279][ T1556] worker_thread+0xedf/0x1590 [ 770.290237][ T1556] kthread+0xd5c/0xf00 [ 770.294658][ T1556] ret_from_fork+0x1e0/0x310 [ 770.299485][ T1556] ret_from_fork_asm+0x1a/0x30 [ 770.304698][ T1556] [ 770.307162][ T1556] Uninit was created at: [ 770.311740][ T1556] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 770.319159][ T1556] kstrdup+0x8a/0x2a0 [ 770.323595][ T1556] kstrdup_const+0x5e/0x90 [ 770.328294][ T1556] __kernfs_new_node+0x6e/0xa70 [ 770.333522][ T1556] kernfs_new_node+0x1f0/0x370 [ 770.338543][ T1556] kernfs_create_dir_ns+0x9a/0x2b0 [ 770.344104][ T1556] sysfs_create_dir_ns+0x19c/0x540 [ 770.349444][ T1556] kobject_add_internal+0xeed/0x1840 [ 770.362895][ T1556] kobject_init_and_add+0x371/0x4e0 [ 770.370546][ T1556] net_rx_queue_update_kobjects+0x314/0xd40 [ 770.370978][ T32] hid (null): report_id 22008 is invalid [ 770.376942][ T1556] netdev_register_kobject+0x2bc/0x4f0 [ 770.377102][ T1556] register_netdevice+0x1b41/0x25d0 [ 770.394054][ T1556] veth_newlink+0x88f/0x1630 [ 770.398944][ T1556] rtnl_newlink_create+0x419/0x1250 [ 770.404530][ T1556] rtnl_newlink+0x2f13/0x3a90 [ 770.409443][ T1556] rtnetlink_rcv_msg+0x106f/0x14b0 [ 770.414948][ T1556] netlink_rcv_skb+0x54d/0x680 [ 770.420011][ T1556] rtnetlink_rcv+0x35/0x40 [ 770.429748][ T1556] netlink_unicast+0xed8/0x1290 [ 770.435723][ T1556] netlink_sendmsg+0x10b3/0x1250 [ 770.440895][ T1556] __sock_sendmsg+0x330/0x3d0 [ 770.446105][ T1556] __sys_sendto+0x593/0x720 [ 770.450880][ T1556] __ia32_compat_sys_socketcall+0xa89/0x1af0 [ 770.465445][ T1556] ia32_sys_call+0x41be/0x42c0 [ 770.470457][ T1556] __do_fast_syscall_32+0xb0/0x150 [ 770.478077][ T1556] do_fast_syscall_32+0x38/0x80 [ 770.483385][ T1556] do_SYSENTER_32+0x1f/0x30 [ 770.488283][ T1556] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 770.495759][ T1556] [ 770.498230][ T1556] Bytes 12-14 of 65535 are uninitialized [ 770.505875][ T1556] Memory access of size 65535 starts at ffff88804ebacd51 [ 770.513368][ T1556] [ 770.515885][ T1556] CPU: 0 UID: 0 PID: 1556 Comm: kworker/0:2 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(undef) [ 770.516563][ T32] logitech-djreceiver 0003:046D:C71B.000A: report_id 22008 is invalid [ 770.528538][ T1556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.528637][ T1556] Workqueue: usb_hub_wq hub_event [ 770.537062][ T32] logitech-djreceiver 0003:046D:C71B.000A: item 0 2 1 8 parsing failed [ 770.547294][ T1556] [ 770.547330][ T1556] ===================================================== [ 770.580585][ T1556] Disabling lock debugging due to kernel taint [ 770.588322][ T1556] Kernel panic - not syncing: kmsan.panic set ... [ 770.594954][ T1556] CPU: 0 UID: 0 PID: 1556 Comm: kworker/0:2 Tainted: G B 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(undef) [ 770.609005][ T1556] Tainted: [B]=BAD_PAGE [ 770.613319][ T1556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 770.623590][ T1556] Workqueue: usb_hub_wq hub_event [ 770.628924][ T1556] Call Trace: [ 770.632363][ T1556] [ 770.635449][ T1556] __dump_stack+0x26/0x30 [ 770.640047][ T1556] dump_stack_lvl+0x53/0x270 [ 770.644900][ T1556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 770.651026][ T1556] dump_stack+0x1e/0x25 [ 770.655422][ T1556] panic+0x4bd/0xd50 [ 770.659656][ T1556] kmsan_report+0x31c/0x320 [ 770.664466][ T1556] ? kmsan_internal_check_memory+0x16c/0x230 [ 770.670730][ T1556] ? kmsan_handle_urb+0x2c/0x40 [ 770.675867][ T1556] ? usb_submit_urb+0x5a1/0x2630 [ 770.681099][ T1556] ? usb_start_wait_urb+0xc2/0x320 [ 770.686822][ T1556] ? usb_control_msg+0x27c/0x5b0 [ 770.692047][ T1556] ? usbhid_raw_request+0x4ab/0x690 [ 770.697528][ T1556] ? __hid_request+0x2bd/0x500 [ 770.702543][ T1556] ? hidinput_connect+0x3bf5/0x5cc0 [ 770.708039][ T1556] ? hid_connect+0x6b4/0x3440 [ 770.712963][ T1556] ? hid_hw_start+0xfc/0x1e0 [ 770.717809][ T1556] ? ms_probe+0x2e5/0x890 [ 770.722367][ T1556] ? hid_device_probe+0x536/0xab0 [ 770.727679][ T1556] ? really_probe+0x4d1/0xd90 [ 770.732680][ T1556] ? __driver_probe_device+0x268/0x380 [ 770.738429][ T1556] ? driver_probe_device+0x70/0x8b0 [ 770.743920][ T1556] ? __device_attach_driver+0x4ee/0x950 [ 770.749764][ T1556] ? bus_for_each_drv+0x3e3/0x680 [ 770.755046][ T1556] ? __device_attach+0x3c8/0x5c0 [ 770.760250][ T1556] ? device_initial_probe+0x33/0x40 [ 770.765735][ T1556] ? bus_probe_device+0x3ba/0x5e0 [ 770.771015][ T1556] ? device_add+0x12a9/0x1c10 [ 770.775952][ T1556] ? hid_add_device+0x5ed/0x7b0 [ 770.781076][ T1556] ? usbhid_probe+0x1fec/0x2660 [ 770.786205][ T1556] ? usb_probe_interface+0xd04/0x1310 [ 770.791807][ T1556] ? really_probe+0x4d1/0xd90 [ 770.796769][ T1556] ? __driver_probe_device+0x268/0x380 [ 770.802536][ T1556] ? driver_probe_device+0x70/0x8b0 [ 770.808049][ T1556] ? __device_attach_driver+0x4ee/0x950 [ 770.813892][ T1556] ? bus_for_each_drv+0x3e3/0x680 [ 770.819177][ T1556] ? __device_attach+0x3c8/0x5c0 [ 770.824389][ T1556] ? device_initial_probe+0x33/0x40 [ 770.829866][ T1556] ? bus_probe_device+0x3ba/0x5e0 [ 770.835141][ T1556] ? device_add+0x12a9/0x1c10 [ 770.840075][ T1556] ? usb_set_configuration+0x3493/0x3b70 [ 770.846015][ T1556] ? usb_generic_driver_probe+0xfc/0x290 [ 770.851942][ T1556] ? usb_probe_device+0x38a/0x690 [ 770.857198][ T1556] ? really_probe+0x4d1/0xd90 [ 770.862152][ T1556] ? __driver_probe_device+0x268/0x380 [ 770.867901][ T1556] ? driver_probe_device+0x70/0x8b0 [ 770.873414][ T1556] ? __device_attach_driver+0x4ee/0x950 [ 770.879274][ T1556] ? bus_for_each_drv+0x3e3/0x680 [ 770.884543][ T1556] ? __device_attach+0x3c8/0x5c0 [ 770.889750][ T1556] ? device_initial_probe+0x33/0x40 [ 770.895230][ T1556] ? bus_probe_device+0x3ba/0x5e0 [ 770.900493][ T1556] ? device_add+0x12a9/0x1c10 [ 770.905426][ T1556] ? usb_new_device+0x104b/0x20c0 [ 770.910707][ T1556] ? hub_event+0x5588/0x7580 [ 770.915567][ T1556] ? process_scheduled_works+0xb8e/0x1d80 [ 770.921575][ T1556] ? worker_thread+0xedf/0x1590 [ 770.926705][ T1556] ? kthread+0xd5c/0xf00 [ 770.931168][ T1556] ? ret_from_fork+0x1e0/0x310 [ 770.936145][ T1556] ? ret_from_fork_asm+0x1a/0x30 [ 770.941352][ T1556] ? bus_for_each_drv+0x3e3/0x680 [ 770.946637][ T1556] ? __device_attach+0x3c8/0x5c0 [ 770.951863][ T1556] ? device_initial_probe+0x33/0x40 [ 770.957349][ T1556] ? kmsan_get_metadata+0xfb/0x160 [ 770.962746][ T1556] ? kmsan_metadata_is_contiguous+0xdf/0x1e0 [ 770.969042][ T1556] kmsan_internal_check_memory+0x16c/0x230 [ 770.975154][ T1556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 770.981262][ T1556] kmsan_handle_urb+0x2c/0x40 [ 770.986210][ T1556] usb_submit_urb+0x5a1/0x2630 [ 770.991244][ T1556] ? stack_depot_save_flags+0x35/0x7b0 [ 770.996961][ T1556] ? kmsan_get_metadata+0xfb/0x160 [ 771.002375][ T1556] ? kmsan_get_metadata+0x30/0x160 [ 771.007787][ T1556] usb_start_wait_urb+0xc2/0x320 [ 771.013044][ T1556] usb_control_msg+0x27c/0x5b0 [ 771.018096][ T1556] usbhid_raw_request+0x4ab/0x690 [ 771.023439][ T1556] __hid_request+0x2bd/0x500 [ 771.028279][ T1556] ? __pfx_usbhid_raw_request+0x10/0x10 [ 771.034135][ T1556] hidinput_connect+0x3bf5/0x5cc0 [ 771.039441][ T1556] ? driver_probe_device+0x70/0x8b0 [ 771.044937][ T1556] ? __device_attach_driver+0x4ee/0x950 [ 771.050780][ T1556] ? bus_for_each_drv+0x3e3/0x680 [ 771.056057][ T1556] ? __device_attach+0x3c8/0x5c0 [ 771.061269][ T1556] ? bus_probe_device+0x3ba/0x5e0 [ 771.066536][ T1556] ? device_add+0x12a9/0x1c10 [ 771.071469][ T1556] ? usb_new_device+0x104b/0x20c0 [ 771.076766][ T1556] ? hub_event+0x5588/0x7580 [ 771.081644][ T1556] ? process_scheduled_works+0xb8e/0x1d80 [ 771.087649][ T1556] ? worker_thread+0xedf/0x1590 [ 771.092770][ T1556] ? kthread+0xd5c/0xf00 [ 771.097227][ T1556] ? ret_from_fork+0x1e0/0x310 [ 771.102208][ T1556] ? ret_from_fork_asm+0x1a/0x30 [ 771.107413][ T1556] ? kmsan_get_metadata+0xfb/0x160 [ 771.112816][ T1556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 771.119024][ T1556] hid_connect+0x6b4/0x3440 [ 771.123875][ T1556] hid_hw_start+0xfc/0x1e0 [ 771.128556][ T1556] ms_probe+0x2e5/0x890 [ 771.132911][ T1556] ? kmsan_get_metadata+0xfb/0x160 [ 771.138327][ T1556] ? __pfx_ms_probe+0x10/0x10 [ 771.143210][ T1556] hid_device_probe+0x536/0xab0 [ 771.148356][ T1556] ? __pfx_hid_device_probe+0x10/0x10 [ 771.154004][ T1556] really_probe+0x4d1/0xd90 [ 771.158813][ T1556] __driver_probe_device+0x268/0x380 [ 771.164405][ T1556] driver_probe_device+0x70/0x8b0 [ 771.169721][ T1556] ? kmsan_get_metadata+0xfb/0x160 [ 771.175128][ T1556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 771.181250][ T1556] __device_attach_driver+0x4ee/0x950 [ 771.186944][ T1556] bus_for_each_drv+0x3e3/0x680 [ 771.192048][ T1556] ? __pfx___device_attach_driver+0x10/0x10 [ 771.198265][ T1556] __device_attach+0x3c8/0x5c0 [ 771.203334][ T1556] device_initial_probe+0x33/0x40 [ 771.208637][ T1556] bus_probe_device+0x3ba/0x5e0 [ 771.213750][ T1556] device_add+0x12a9/0x1c10 [ 771.218550][ T1556] hid_add_device+0x5ed/0x7b0 [ 771.223510][ T1556] usbhid_probe+0x1fec/0x2660 [ 771.228458][ T1556] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 771.234842][ T1556] ? __pfx_usbhid_probe+0x10/0x10 [ 771.240149][ T1556] usb_probe_interface+0xd04/0x1310 [ 771.245617][ T1556] ? __pfx_usb_probe_interface+0x10/0x10 [ 771.251488][ T1556] really_probe+0x4d1/0xd90 [ 771.256309][ T1556] __driver_probe_device+0x268/0x380 [ 771.261895][ T1556] driver_probe_device+0x70/0x8b0 [ 771.267217][ T1556] ? kmsan_get_metadata+0xfb/0x160 [ 771.272616][ T1556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 771.278734][ T1556] __device_attach_driver+0x4ee/0x950 [ 771.284445][ T1556] bus_for_each_drv+0x3e3/0x680 [ 771.289543][ T1556] ? __pfx___device_attach_driver+0x10/0x10 [ 771.295762][ T1556] __device_attach+0x3c8/0x5c0 [ 771.300828][ T1556] device_initial_probe+0x33/0x40 [ 771.306144][ T1556] bus_probe_device+0x3ba/0x5e0 [ 771.311260][ T1556] device_add+0x12a9/0x1c10 [ 771.316060][ T1556] usb_set_configuration+0x3493/0x3b70 [ 771.321936][ T1556] usb_generic_driver_probe+0xfc/0x290 [ 771.327701][ T1556] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 771.334071][ T1556] usb_probe_device+0x38a/0x690 [ 771.339163][ T1556] ? __pfx_usb_probe_device+0x10/0x10 [ 771.344764][ T1556] really_probe+0x4d1/0xd90 [ 771.349577][ T1556] __driver_probe_device+0x268/0x380 [ 771.355161][ T1556] driver_probe_device+0x70/0x8b0 [ 771.360481][ T1556] ? kmsan_get_metadata+0xfb/0x160 [ 771.365876][ T1556] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 771.372003][ T1556] __device_attach_driver+0x4ee/0x950 [ 771.377699][ T1556] bus_for_each_drv+0x3e3/0x680 [ 771.382793][ T1556] ? __pfx___device_attach_driver+0x10/0x10 [ 771.389033][ T1556] __device_attach+0x3c8/0x5c0 [ 771.394097][ T1556] device_initial_probe+0x33/0x40 [ 771.399401][ T1556] bus_probe_device+0x3ba/0x5e0 [ 771.404517][ T1556] device_add+0x12a9/0x1c10 [ 771.409312][ T1556] usb_new_device+0x104b/0x20c0 [ 771.414461][ T1556] hub_event+0x5588/0x7580 [ 771.419229][ T1556] ? pwq_dec_nr_in_flight+0x1678/0x1d80 [ 771.425109][ T1556] ? __pfx_hub_event+0x10/0x10 [ 771.430166][ T1556] process_scheduled_works+0xb8e/0x1d80 [ 771.436156][ T1556] worker_thread+0xedf/0x1590 [ 771.441170][ T1556] kthread+0xd5c/0xf00 [ 771.445475][ T1556] ? __pfx_worker_thread+0x10/0x10 [ 771.451230][ T1556] ? __pfx_kthread+0x10/0x10 [ 771.456174][ T1556] ret_from_fork+0x1e0/0x310 [ 771.461068][ T1556] ? __pfx_kthread+0x10/0x10 [ 771.466015][ T1556] ret_from_fork_asm+0x1a/0x30 [ 771.471095][ T1556] [ 771.474553][ T1556] Kernel Offset: disabled [ 771.478976][ T1556] Rebooting in 86400 seconds..