last executing test programs: 6.634992609s ago: executing program 5 (id=1390): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f00000d9000/0x2000)=nil, 0x2000, 0x14) 6.625415829s ago: executing program 4 (id=1391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x2) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 6.293376967s ago: executing program 5 (id=1394): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x7f, 0x200, 0x1ff, 0x19, "d3174b8648c5889730455dda965df32c680ffd"}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000140), 0xc, &(0x7f00000018c0)={0x0, 0x121c}}, 0x20000400) socketpair$unix(0x1, 0x590064dbc3765b12, 0x0, &(0x7f0000001940)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0xfffffffc, 0x2, 0x8}, 0x2, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x0, 0x8000000000000000}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b40)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f00000013c0)={0x6c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x67c, 0x75}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x60488d5}, 0x40440d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ec0)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000001f00)=0x7f, 0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000002040)={0x6, 0x1, 0x200}) 6.065093568s ago: executing program 5 (id=1397): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$eJzs3W9v00YcwPGfSzuiTKqmMSFUFTjKJhWpBCeBoIgn85xLeuDYke2g9hGqaIoqUpgok9Y+YTxhm7S9CJ7uRewdob2ETbaT/qFNApQ2XfX9RHBX++z7XWr5JzfxWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFhuzbaLlnjGby+pwdxaGDR3f+xtfWCB3NhXDOlXxEr+SS4nl7JFl77ZXX0x+W9OZrOfZiWXFDnZ/vLiV/cuTE70tx8S8InY3Np+utLtdl6MO5BjdPn84HUN7ZsoME2noZWJAlWtVOxbi/VI1Y2no+Uo1k3lhtqJg1DNuzdUsVotK11YDtp+o+Z4ur/w7s2SbVfU/UJLO2EU+LfuFyJ30Xie8Rtpm2R10uZuciA+MLGKtdNUam292ymPGkDSqPghjUqjGpXsUqlYLJWKlTvVO3dte/LAAvs9cqDF+A9ajNdnPHsDRzPRy//iiRFf2rIk6tCXKzUJJZDmgPU9/fz/3S09tN+9+b+f5S/trp6RNP9fEZHvRa4Myv8DYjm516ZsybY8lRXpSlc68mLsEZ3sqyFafDESSSBGmuKkS1RviZKqVKQitjySRalLJErqYsQTLZEsSySx6PSIciUULY7EEkgoSubFlRuipChVqUpZlGgpyLIE0hZfGlITJ93Lmqyn73tZlDUoxp1GxYHDyPePu46UhoyW/I+j+9yncOCT/dvP/wAAAAAA4Myy0r++J9f/U3I5rdWNp+1xhwUAAAAAAD6j9JP/2aSYSmqXxeL6HwAAAACAs8ZK77GzRCQvV7Pamljp7VL8EQAAAAAAgDMi/fz/SlKkc6BcFWtnuhSu/wEAAAAAOCN+GznHftQ6b/39j4ThlPW6tfSttZHOzetsnMu2O/f+HuP6jDXd20laVLJictLVs1Yua7QzCea7XrE2Kg5rNwBnJ4BfPiaAC5Pyh1zL2lxbzcrV/pqsl3zdeLrgBt69ojjO9ESsl+Kfnq3/LOnwf/eb01ZO1rudwuPn3dU0ltfJXl5v9CZQPDCP4pBYXqbzLaT3XBw64qn0Roxev3lL1ta7HXvv+CeyzSf29/hqekifb2QuazXXm/E2v3/8uaTPYmHQ6HtRFI848jdyPWtzff56VhwSRWlUFKW9URz+Xhw9ivKoKMpHjAIAxmVtRBay5EDe/YSz3Kdld/nI7P5G5rM28zPpiXVy5pAzuj3qjG4fMbv9deAZSINybNLvn+9l1bfJBm8H9ht5JSt5C8+93PhRLm5ubd9c31h50nnSeVYqlSv2bdu+U5KpdBi9gtwDADhE9owdGfKMnZEtrNsjrqq/3vlKQUEey3PpyqospHcbpN84OHSv+T1fQ1gYcdWaT9Nk9oSXhSFXdV+kdzn091sa2nZ/DOXj/0UAAHCC5kbk4Q/J/wsjrrv35/LhV8f5PU9rAwAAx0OH76x8/KsVhqb1qFitFp14UaswcB+o0NQaWhk/1qG76PgNrVphEAdu4CWVh6amIxW1W60gjFU9CFUriMxSOn2g6j36PdJNx4+NG7U87URauYEfO26saiZyVav9g2eiRR2mG0ct7Zq6cZ3YBL6Kgnbo6oJSkdZ7Gpqa9mNTN0nVV63QNJ0wpx4GXrupVU1HbmhacZDtsN+X8etB2Ex3Wxj3mw0AwCmxubX9dKXb7bw4xsq4xwgAAPYjSwMAAAAAAAAAAAAAAAAAAAAAcPqdxP1/VI5YmTjlv6b+VNCnJZ4Pr5z/H8Z8QpWRp45Xx35yAnCs/gsAAP//YsVNsQ==") r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 5.087092713s ago: executing program 5 (id=1400): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6751af0208456ff9b58a3dc3a877e0ad"}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x6}, @TCA_FLOWER_KEY_MPLS_OPTS={0x28, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xffff9}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xcc}}, 0x0) 4.949014905s ago: executing program 0 (id=1402): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@fwd={0x4, 0x0, 0x0, 0xf, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 4.948427715s ago: executing program 3 (id=1403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x202e) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f00000024c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002480)={&(0x7f0000002240)={0x23c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x36}, @NL80211_ATTR_IE={0xf8, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x6, 0x0, {0x6, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x9, 0x7fffffff, 0x20}}, @fast_bss_trans={0x37, 0xd0, {0x20, 0x6, "70acca69f4fe8d6a9217e758fd91ab8c", "352a710a0f04c04bb44e5f4755510e92c18e6615b86fbb7d1381608e45c55154", "7ddd02623920f3a9125ea0a8abc0e5a703bbc54f7db493df4c1254177148bdf8", [{0x3, 0xf, "792fdcdc2737ee260c8162d47c0dd3"}, {0x4, 0x12, "f5017e9e47a934f624a4113f474b2270144d"}, {0x4, 0xc, "735f4f8140f6f74e1b6aa873"}, {0x1, 0x19, "470d4e34efe566e2932e386181548e321dabf76a663c548df7"}, {0x3, 0x20, "efa9161ca4aca5839f3d0990440abadc85252144f91240ac8a350045c1e15126"}, {0x2, 0xc, "4d812676d431258eff01498c"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xc, 0xb8, 0x4}}]}, @NL80211_ATTR_IE={0x118, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x5, @broadcast, 0x8, @value=@broadcast, 0x0, 0x4, @device_a, 0x200}}, @measure_req={0x26, 0xeb, {0x9, 0x4, 0x6, "db7208e4cf3f124b593c60367c70ad8bcb98642bd921ab877ac07bc62fd3ecb9c47be7905be6a7dd2740cedb4ae37972ba78609ef21877146a38147e347ff37d8a532330cbe6f5cce6cd93261ccb1baefca50631ce1e137d9fda451e6b36dbfea3363cc0d0a3166b93f55190143c88f681bd05295cd11f10c13f59ea7c68070635644670d4578fa8b9cbaf20ad8fd233ce96bc3387ddb5356a17eaaf9996a10268287dc8fce20cec209d83f373654fec24ba4d1575030d555914dada34b4f6771b0c52f3a995a680ac7dfc8aef8aeb1acbbf3ee59c210aba5a0b21d9a8dfd4674aba40cccd4fe2bd"}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020207325000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x4}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='binder\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000301010100000000000000000a000000300001802c0001801400030000000000000000000000ffffe000000214000400000000000000000000f40000000000011400198008000100010000000800020012"], 0x58}}, 0x0) 4.847439188s ago: executing program 1 (id=1404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) 4.765044917s ago: executing program 0 (id=1405): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x1, 0x130, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.532818933s ago: executing program 5 (id=1407): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x8}, @NHA_GROUP={0x4}]}, 0x20}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.421028742s ago: executing program 0 (id=1408): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x49, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) landlock_create_ruleset(&(0x7f0000000080)={0x302}, 0x10, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = fanotify_init(0x200, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') r3 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x4800105a, r4, 0x0) dup3(r4, r1, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000100)={@mcast2={0xff, 0x3}}, 0x14) write$tcp_congestion(r4, &(0x7f0000000000)='cdg\x00', 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$sock_timeval(r6, 0x1, 0x32, &(0x7f0000000000)={0x77359400}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xb04, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.24529763s ago: executing program 2 (id=1409): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x7f, 0x200, 0x1ff, 0x19, "d3174b8648c5889730455dda965df32c680ffd"}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000140), 0xc, &(0x7f00000018c0)={0x0, 0x121c}}, 0x20000400) socketpair$unix(0x1, 0x590064dbc3765b12, 0x0, &(0x7f0000001940)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0xfffffffc, 0x2, 0x8}, 0x2, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x0, 0x8000000000000000}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b40)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f00000013c0)={0x6c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x67c, 0x75}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x60488d5}, 0x40440d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ec0)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000001f00)=0x7f, 0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000002040)={0x6, 0x1, 0x200}) 4.104917112s ago: executing program 2 (id=1410): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x810001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x5, 0x3f, 0x6c03, 0xee, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r6, 0x8ab2, 0x0) 3.885182267s ago: executing program 3 (id=1411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000052000100ffffffff000000000a000000140006"], 0x28}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'veth1_macvtap\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) set_robust_list(&(0x7f0000000600)={0x0, 0x8000000000000000}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c000000190a01020000000000000000000000000900010073797a30000000000900020073797a3200000000"], 0x2c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000400)) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) ioctl$VT_OPENQRY(r4, 0x4bfa, &(0x7f00000006c0)) unshare(0x2c020400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 3.729114433s ago: executing program 4 (id=1412): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r1, @ANYBLOB="08002600851600000a001800000500000000000004005a"], 0x4c}}, 0x0) 3.713218228s ago: executing program 1 (id=1413): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2800}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], 0x0, 0xb, 0xd0, &(0x7f0000000700)=""/208, 0x0, 0x50, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x3, 0x4, 0x2}, 0x10, 0x1e027, r4, 0x0, 0x0, &(0x7f0000000940), 0x10, 0xa, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000005c0)={0x0, 0x5c6, 0x0, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @str='%-^\x00'}]}]}, 0x2c}}, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 3.570468794s ago: executing program 4 (id=1414): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 2.356141993s ago: executing program 1 (id=1415): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d000000000007000000000002009500094000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.323976152s ago: executing program 0 (id=1416): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x8b, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) setresuid(0x0, 0x0, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002500010000"], 0x18}], 0x1}, 0x4000000) 2.261019222s ago: executing program 2 (id=1417): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@fwd={0x4, 0x0, 0x0, 0xf, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.836907886s ago: executing program 1 (id=1418): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101701) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="0200ff03100005000500000002000020d3"]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x810001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x5, 0x3f, 0x6c03, 0xee, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.831769563s ago: executing program 4 (id=1419): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x5}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6751af0208456ff9b58a3dc3a877e0ad"}, @TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e22}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x6}, @TCA_FLOWER_KEY_MPLS_OPTS={0x28, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0xffff9}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0xcc}}, 0x0) 1.80237044s ago: executing program 2 (id=1420): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x88, r2, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xbe, 0x5a}}}}, [@NL80211_ATTR_TX_RATES={0x58, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x6}, {0x2, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x8}, {0x7, 0x8}, {0x1, 0x7}, {0x6, 0x3}, {0x7, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x7}, {0x4}, {0x6, 0x9}, {0x0, 0x8}, {0x1}, {0x5, 0x4}, {0x2, 0xa}, {0x1, 0x4}, {0x3, 0x8}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff00, 0x61f, 0x74b3, 0x7f, 0x7, 0x0, 0x3, 0x401]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40004) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r3, &(0x7f0000000100)}, 0x20) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000580)=ANY=[@ANYBLOB="62870000", @ANYRES16=r3, @ANYBLOB="00c62bbd70f2fddbdfe90000000000000000000000000000f2ce724678db", @ANYRES32=0x0, @ANYBLOB="0cf5128b08630df6940099003b00003100000042d763742740f1e0dcbb25eb35df52f568e5df3f8a790a9de0c9e58957ab980a37583a822aabef593318f7adbc89d925665e61ce1f88314817621d9535f45ef3170fd246fcb8d18e636b9616b946c5773033e1ca6a09d7476bd600f94b0ddf4e9f74a9d026a1992be387e35de4d4319666ed8859306dec1b614d1cb3c660c6b996bfb7fc626b2bf4"], 0x28}, 0x1, 0x0, 0x0, 0x20004884}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'nr0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x700, 0x7, 0xd85, 0x3f, {{0xe, 0x4, 0x0, 0x4, 0x38, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x23, 0x4b, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101, @local, @local, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd0, r5, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_LINK={0x8, 0x1, r9}]}}}, @IFLA_MASTER={0x8}]}, 0x84}}, 0x4000080) 1.770841227s ago: executing program 3 (id=1421): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f0000000140)) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) 1.530012798s ago: executing program 2 (id=1422): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x1, 0x7f, 0x200, 0x1ff, 0x19, "d3174b8648c5889730455dda965df32c680ffd"}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x80800) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000140), 0xc, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[], 0x121c}}, 0x20000400) socketpair$unix(0x1, 0x590064dbc3765b12, 0x0, &(0x7f0000001940)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0xfffffffc, 0x2, 0x8}, 0x2, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x0, 0x8000000000000000}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b40)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001b80)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f00000013c0)={0x6c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x67c, 0x75}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x60488d5}, 0x40440d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ec0)='./cgroup/syz1\x00', 0x1ff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000001f00)=0x7f, 0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000002040)={0x6, 0x1, 0x200}) 1.4411012s ago: executing program 4 (id=1423): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) sendmmsg$inet(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002110, 0x0) 1.419385754s ago: executing program 1 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$inet(r5, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$HIDIOCSUSAGE(r6, 0x4018480c, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6c7, r7}, 0x38) 1.375110096s ago: executing program 3 (id=1425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) 1.134806693s ago: executing program 0 (id=1426): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r1, @ANYBLOB="08002600851600000a001800000500000000000004005a"], 0x4c}}, 0x0) 1.06684167s ago: executing program 4 (id=1427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x202e) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f00000024c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002480)={&(0x7f0000002240)={0x23c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xfffa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x36}, @NL80211_ATTR_IE={0xf8, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x1, 0x6, 0x0, {0x6, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3}, 0x9, 0x7fffffff, 0x20}}, @fast_bss_trans={0x37, 0xd0, {0x20, 0x6, "70acca69f4fe8d6a9217e758fd91ab8c", "352a710a0f04c04bb44e5f4755510e92c18e6615b86fbb7d1381608e45c55154", "7ddd02623920f3a9125ea0a8abc0e5a703bbc54f7db493df4c1254177148bdf8", [{0x3, 0xf, "792fdcdc2737ee260c8162d47c0dd3"}, {0x4, 0x12, "f5017e9e47a934f624a4113f474b2270144d"}, {0x4, 0xc, "735f4f8140f6f74e1b6aa873"}, {0x1, 0x19, "470d4e34efe566e2932e386181548e321dabf76a663c548df7"}, {0x3, 0x20, "efa9161ca4aca5839f3d0990440abadc85252144f91240ac8a350045c1e15126"}, {0x2, 0xc, "4d812676d431258eff01498c"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xc, 0xb8, 0x4}}]}, @NL80211_ATTR_IE={0x118, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x3, 0x5, @broadcast, 0x8, @value=@broadcast, 0x0, 0x4, @device_a, 0x200}}, @measure_req={0x26, 0xeb, {0x9, 0x4, 0x6, "db7208e4cf3f124b593c60367c70ad8bcb98642bd921ab877ac07bc62fd3ecb9c47be7905be6a7dd2740cedb4ae37972ba78609ef21877146a38147e347ff37d8a532330cbe6f5cce6cd93261ccb1baefca50631ce1e137d9fda451e6b36dbfea3363cc0d0a3166b93f55190143c88f681bd05295cd11f10c13f59ea7c68070635644670d4578fa8b9cbaf20ad8fd233ce96bc3387ddb5356a17eaaf9996a10268287dc8fce20cec209d83f373654fec24ba4d1575030d555914dada34b4f6771b0c52f3a995a680ac7dfc8aef8aeb1acbbf3ee59c210aba5a0b21d9a8dfd4674aba40cccd4fe2bd"}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x94, 0x4}]}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) 1.045141036s ago: executing program 2 (id=1428): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="1100"}) 736.494751ms ago: executing program 5 (id=1429): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803d05fab087a0100000005481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0c1bcae5fa0f5f9dcdd51af51a", 0xb6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 238.59097ms ago: executing program 1 (id=1430): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getegid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0], 0xd, 0x2a0, &(0x7f0000000840)="$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") ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000b00)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81, 0x440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x56cd) dup(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)=0x0) timer_create(0x7, &(0x7f0000000580)={0x0, 0x13, 0x2, @thr={&(0x7f0000000040)="bdc290797a7f7e79217bbfb9ec33053c5b1c565f08", &(0x7f00000006c0)="a4a4d242b037e3a427ee4aa28fc0aba0f361ff502677a1817d399f0ecad978ee0f3f2979cd7a3848e433134f352d914dc5327184ea41137e21126909dc2db2df5e8c937791ef9348898b6b588e61bf6c8b844c0bbc84e68b81aaaf7a51904f1f239b3e4fa36b8f642cbfe7eb42dc25779ffe2b67417f3dd322fc8799a842706e423f4464c38482832b4a1cf597e6717b2d64c59a4a6321ccc2aae44f7ad2f12fdb9f0daad3123b46f24f2cd4a1e435ddaae80b1a62e69fc43aa7b936c16ab6a8d1b4efabb5fa45fc8414614b9b3d0521582e4fafd1877996490a890ea6c5f57b180d8c5169900c1b8d8151f48cf1334a"}}, &(0x7f00000005c0)) timer_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000800)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000500)='sysfs\x00', 0x80, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) unshare(0x800) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) timer_delete(0x0) pivot_root(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000ec0)={{0x9, 0x2}, 0x100, './file0\x00'}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x16, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_fd={0x18, 0x6}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x7, 0x4d, &(0x7f0000000cc0)=""/77, 0x41100, 0xa, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000c40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0x1, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x90) 144.92952ms ago: executing program 0 (id=1431): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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") r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 105.686599ms ago: executing program 3 (id=1432): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@fwd={0x4, 0x0, 0x0, 0xf, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 0s ago: executing program 3 (id=1433): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x262998196b2666c2, 0x0, 0x0, 0x0, 0x45, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): ing filesystem 00000000-0000-0000-0000-000000000000. [ 206.354394][ T6187] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.382642][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.389718][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.417636][ T6830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.528654][ T6830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.540611][ T6830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.594997][ T6979] loop4: detected capacity change from 0 to 512 [ 206.603856][ T6830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.654899][ T6828] hsr_slave_0: entered promiscuous mode [ 206.667895][ T6828] hsr_slave_1: entered promiscuous mode [ 206.675455][ T6828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.684021][ T6828] Cannot create hsr debugfs directory [ 206.732186][ T6979] EXT4-fs: test_dummy_encryption requires encrypt feature [ 207.436613][ T6630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.769592][ T6830] hsr_slave_0: entered promiscuous mode [ 207.803337][ T6830] hsr_slave_1: entered promiscuous mode [ 207.823485][ T6830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.840613][ T6830] Cannot create hsr debugfs directory [ 207.901628][ T6630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.927229][ T6630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.037530][ T6630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.456209][ T6187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.232507][ T6187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.445296][ T6187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.609466][ T6187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.902962][ T6735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.933503][ T6735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.039792][ T6735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.054376][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 210.060379][ T6735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.080804][ T6187] bridge_slave_1: left allmulticast mode [ 210.086474][ T6187] bridge_slave_1: left promiscuous mode [ 210.094776][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.107391][ T6187] bridge_slave_0: left allmulticast mode [ 210.115672][ T6187] bridge_slave_0: left promiscuous mode [ 210.122163][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.137108][ T6187] bridge_slave_1: left allmulticast mode [ 210.144828][ T6187] bridge_slave_1: left promiscuous mode [ 210.151253][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.163795][ T6187] bridge_slave_0: left allmulticast mode [ 210.169551][ T6187] bridge_slave_0: left promiscuous mode [ 210.175823][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.188642][ T6187] bridge_slave_1: left allmulticast mode [ 210.195812][ T6187] bridge_slave_1: left promiscuous mode [ 210.202898][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.216176][ T6187] bridge_slave_0: left allmulticast mode [ 210.224588][ T6187] bridge_slave_0: left promiscuous mode [ 210.231072][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.244626][ T6187] bridge_slave_1: left allmulticast mode [ 210.252418][ T6187] bridge_slave_1: left promiscuous mode [ 210.258208][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.268454][ T6187] bridge_slave_0: left allmulticast mode [ 210.274474][ T6187] bridge_slave_0: left promiscuous mode [ 210.281986][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.626243][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.639178][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.655126][ T6187] bond0 (unregistering): Released all slaves [ 211.774064][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.786316][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.801779][ T6187] bond0 (unregistering): Released all slaves [ 211.915581][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.928447][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.942841][ T6187] bond0 (unregistering): Released all slaves [ 212.048556][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.058954][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.070558][ T6187] bond0 (unregistering): Released all slaves [ 212.248676][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.328127][ T7006] dvmrp0: entered allmulticast mode [ 212.420778][ T7006] dvmrp0: left allmulticast mode [ 212.593515][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.658594][ T4003] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.665895][ T4003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.764660][ T4003] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.771901][ T4003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.104412][ T6736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.226135][ T6736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.256046][ T6736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.402026][ T6736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.505460][ T6735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.687656][ T7026] iso9660: Unknown parameter '' [ 214.417986][ T6735] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.628718][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.636003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.852425][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.859610][ T2502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.351210][ T6187] hsr_slave_0: left promiscuous mode [ 215.375648][ T6187] hsr_slave_1: left promiscuous mode [ 215.418731][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.442966][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.454494][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.462420][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.531799][ T6187] hsr_slave_0: left promiscuous mode [ 215.557966][ T6187] hsr_slave_1: left promiscuous mode [ 215.574629][ T7047] loop4: detected capacity change from 0 to 2048 [ 215.602305][ T7047] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 215.613680][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.626545][ T7047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.646938][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.663360][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.676499][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.920549][ T6187] hsr_slave_0: left promiscuous mode [ 215.926814][ T6187] hsr_slave_1: left promiscuous mode [ 215.934977][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.942801][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.952107][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.959525][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.974577][ T6187] hsr_slave_0: left promiscuous mode [ 215.981870][ T6187] hsr_slave_1: left promiscuous mode [ 215.992357][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.013830][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.126824][ T6187] veth1_macvtap: left promiscuous mode [ 216.140527][ T6187] veth0_macvtap: left promiscuous mode [ 216.152617][ T6187] veth1_vlan: left promiscuous mode [ 216.164356][ T6187] veth0_vlan: left promiscuous mode [ 216.180368][ T6187] veth1_macvtap: left promiscuous mode [ 216.189659][ T6187] veth0_macvtap: left promiscuous mode [ 216.200352][ T6187] veth1_vlan: left promiscuous mode [ 216.208951][ T6187] veth0_vlan: left promiscuous mode [ 216.223402][ T6187] veth1_macvtap: left promiscuous mode [ 216.236572][ T6187] veth0_macvtap: left promiscuous mode [ 216.249409][ T6187] veth1_vlan: left promiscuous mode [ 216.263082][ T6187] veth0_vlan: left promiscuous mode [ 217.131243][ T7054] vhci_hcd: invalid port number 129 [ 217.136544][ T7054] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 217.869369][ T6187] team0 (unregistering): Port device macvlan1 removed [ 218.284446][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 218.757124][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 218.868725][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 219.977521][ T5254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.988607][ T5254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.011954][ T5254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.021182][ T5254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.026445][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 220.029469][ T5254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.050139][ T5254] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.124451][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 221.021846][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 221.063249][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 221.675741][ T6187] team0 (unregistering): Port device macvlan1 removed [ 222.014621][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 222.064870][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 222.140962][ T5235] Bluetooth: hci2: command tx timeout [ 222.548865][ T6735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.683270][ T6736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.001286][ T6736] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.083204][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.090438][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.316892][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.324134][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.515100][ T6830] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.668887][ T7089] iso9660: Unknown parameter '' [ 223.995274][ T6830] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.220744][ T5235] Bluetooth: hci2: command tx timeout [ 224.238585][ T6830] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.418403][ T6735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.533812][ T6830] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.775554][ T6828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.825688][ T6828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.968732][ T6828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 225.020639][ T6828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.381397][ T6735] veth0_vlan: entered promiscuous mode [ 225.460791][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 225.523157][ T6735] veth1_vlan: entered promiscuous mode [ 225.769641][ T7112] loop4: detected capacity change from 0 to 2048 [ 225.812625][ T7112] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 225.829344][ T6830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.874481][ T7112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.181508][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.197474][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.206959][ T7065] bridge_slave_0: entered allmulticast mode [ 226.222735][ T7065] bridge_slave_0: entered promiscuous mode [ 226.288292][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.297106][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.304941][ T5235] Bluetooth: hci2: command tx timeout [ 226.312862][ T7065] bridge_slave_1: entered allmulticast mode [ 226.321140][ T7065] bridge_slave_1: entered promiscuous mode [ 226.419377][ T6735] veth0_macvtap: entered promiscuous mode [ 226.493027][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.515941][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.626002][ T6830] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.656046][ T6735] veth1_macvtap: entered promiscuous mode [ 226.746105][ T7065] team0: Port device team_slave_0 added [ 226.774538][ T7065] team0: Port device team_slave_1 added [ 226.819481][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.843589][ T6736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.883152][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.890369][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.053506][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.060747][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.102697][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.114673][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.143972][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.174581][ T6735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.200217][ T6735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.212414][ T6735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.220966][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.227916][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.290450][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.423408][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.450134][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.484233][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.604584][ T6735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.642299][ T6735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.660302][ T6735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.669821][ T6735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.895786][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.152821][ T7138] vhci_hcd: invalid port number 129 [ 228.158119][ T7138] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 228.382658][ T5235] Bluetooth: hci2: command tx timeout [ 228.493970][ T7065] hsr_slave_0: entered promiscuous mode [ 228.514235][ T7065] hsr_slave_1: entered promiscuous mode [ 228.692748][ T4003] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.700095][ T4003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.745303][ T4003] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.752554][ T4003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.225540][ T7155] loop4: detected capacity change from 0 to 512 [ 229.253149][ T6736] veth0_vlan: entered promiscuous mode [ 229.267242][ T7155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.383404][ T7155] EXT4-fs (loop4): 1 truncate cleaned up [ 229.431221][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.439072][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.451008][ T7155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.113601][ T6736] veth1_vlan: entered promiscuous mode [ 230.195893][ T6187] bridge_slave_1: left allmulticast mode [ 230.207906][ T5228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.217116][ T6187] bridge_slave_1: left promiscuous mode [ 230.223878][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.276578][ T6187] bridge_slave_0: left allmulticast mode [ 230.299696][ T6187] bridge_slave_0: left promiscuous mode [ 230.308015][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.720757][ T5442] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 230.751887][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.764624][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.777087][ T6187] bond0 (unregistering): Released all slaves [ 230.806658][ T6830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.852155][ T4003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.869056][ T4003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.903047][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.925236][ T5442] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.977058][ T5442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 231.009078][ T5442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.040176][ T5442] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.086379][ T5442] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.122597][ T5442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.179026][ T5442] usb 5-1: config 0 descriptor?? [ 231.219335][ T6187] hsr_slave_0: left promiscuous mode [ 231.249607][ T6187] hsr_slave_1: left promiscuous mode [ 231.268636][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.289342][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.440568][ T5469] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 231.646026][ T5442] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 231.668691][ T5469] usb 1-1: Using ep0 maxpacket: 16 [ 231.683633][ T5469] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 231.700079][ T5469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.706854][ T5442] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 231.723346][ T5469] usb 1-1: Product: syz [ 231.727558][ T5469] usb 1-1: Manufacturer: syz [ 231.760116][ T5469] usb 1-1: SerialNumber: syz [ 231.793409][ T5469] r8152-cfgselector 1-1: Unknown version 0x0000 [ 231.800816][ T5469] r8152-cfgselector 1-1: config 0 descriptor?? [ 231.946589][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 232.020260][ T5469] r8152-cfgselector 1-1: Unknown version 0x0000 [ 232.026728][ T5469] r8152-cfgselector 1-1: bad CDC descriptors [ 232.037138][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 232.232855][ T5469] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 232.516294][ T6736] veth0_macvtap: entered promiscuous mode [ 232.648090][ T5437] usb 5-1: USB disconnect, device number 9 [ 232.668289][ T6736] veth1_macvtap: entered promiscuous mode [ 232.923925][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.946043][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.965313][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.988165][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.019485][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.140776][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.152584][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.163235][ T6736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.175375][ T6736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.202842][ T6736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.277797][ T6736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.301051][ T6736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.335536][ T6736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.347954][ T6736] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.454611][ T7201] loop4: detected capacity change from 0 to 2048 [ 233.469614][ T7201] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 233.496186][ T7201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 233.794734][ T6828] veth0_vlan: entered promiscuous mode [ 233.820726][ T6828] veth1_vlan: entered promiscuous mode [ 233.861767][ T6828] veth0_macvtap: entered promiscuous mode [ 234.229167][ T6828] veth1_macvtap: entered promiscuous mode [ 234.457231][ T7065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.532608][ T6830] veth0_vlan: entered promiscuous mode [ 234.589141][ T7065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 234.650404][ T7065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 234.768819][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.969275][ T7214] vhci_hcd: invalid port number 129 [ 234.974693][ T7214] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 235.007966][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.167867][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.323114][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.370040][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.416921][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.461751][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.474839][ T7065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.501564][ T6830] veth1_vlan: entered promiscuous mode [ 235.572753][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.585910][ T7217] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 235.620141][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.664117][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.674684][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.684609][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.695470][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.721508][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.780803][ T6828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.789578][ T6828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.832141][ T6828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.860158][ T6828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.007178][ T6830] veth0_macvtap: entered promiscuous mode [ 236.083439][ T6830] veth1_macvtap: entered promiscuous mode [ 236.226628][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.258405][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.289297][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.340069][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.351774][ T5463] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 236.390091][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.429540][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.471911][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.511317][ T5254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.521365][ T5254] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.523621][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.550223][ T5254] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.552185][ T5463] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 236.570798][ T5254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.577982][ T5463] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.609871][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.650538][ T5254] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.666045][ T5254] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.679196][ T5463] usb 5-1: config 0 has no interface number 0 [ 236.722680][ T5463] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 236.755631][ T5463] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.798167][ T5463] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 236.856450][ T5463] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.896677][ T5463] usb 5-1: Product: syz [ 236.916127][ T5463] usb 5-1: Manufacturer: syz [ 236.951043][ T5463] usb 5-1: SerialNumber: syz [ 236.976418][ T5463] usb 5-1: config 0 descriptor?? [ 237.035179][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.076749][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.108396][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.124850][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.135435][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.146230][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.157111][ T6830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.184637][ T6830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.205575][ T6830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.325812][ T6830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.354202][ T6830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.370946][ T6830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.402015][ T6830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.457610][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.493238][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.668232][ T6187] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.886200][ T6187] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.989556][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.011944][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.076217][ T6187] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.251813][ T5467] usb 5-1: USB disconnect, device number 10 [ 238.288306][ T6187] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.564975][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.587874][ T7264] team_slave_0: entered promiscuous mode [ 238.593921][ T7264] team_slave_1: entered promiscuous mode [ 238.603057][ T7264] vlan2: entered promiscuous mode [ 238.608115][ T7264] team0: entered promiscuous mode [ 238.616228][ T7264] team0: Device vlan2 is already an upper device of the team interface [ 238.629077][ T7264] team0: left promiscuous mode [ 238.634775][ T7264] team_slave_0: left promiscuous mode [ 238.640288][ T7264] team_slave_1: left promiscuous mode [ 238.781989][ T5243] Bluetooth: hci4: command tx timeout [ 238.830355][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.838194][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.369819][ T7279] vhci_hcd: invalid port number 129 [ 239.375149][ T7279] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 239.808287][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.309585][ T6187] bridge_slave_1: left allmulticast mode [ 240.386448][ T6187] bridge_slave_1: left promiscuous mode [ 240.535869][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.756674][ T6187] bridge_slave_0: left allmulticast mode [ 240.782602][ T6187] bridge_slave_0: left promiscuous mode [ 240.800702][ T7288] loop2: detected capacity change from 0 to 256 [ 240.810356][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.860347][ T5243] Bluetooth: hci4: command tx timeout [ 241.344362][ T7301] loop4: detected capacity change from 0 to 2048 [ 241.355262][ T7301] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 241.370712][ T7301] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 241.380972][ T7301] UDF-fs: Scanning with blocksize 512 failed [ 241.398256][ T7301] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 241.408907][ T7301] UDF-fs: Scanning with blocksize 1024 failed [ 241.428703][ T7301] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 241.447954][ T7301] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 241.469964][ T7301] UDF-fs: Scanning with blocksize 2048 failed [ 241.494560][ T7301] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 241.540092][ T7301] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 241.556854][ T7301] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 241.569693][ T7301] UDF-fs: Scanning with blocksize 4096 failed [ 241.576544][ T7301] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 241.791243][ T6187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.808385][ T6187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.828224][ T6187] bond0 (unregistering): Released all slaves [ 241.866768][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.876753][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.744065][ T2502] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.751282][ T2502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.851556][ T7232] chnl_net:caif_netlink_parms(): no params data found [ 242.905075][ T2502] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.912289][ T2502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.944162][ T5243] Bluetooth: hci4: command tx timeout [ 243.757320][ T7320] vhci_hcd: invalid port number 129 [ 243.762870][ T7320] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 244.199803][ T7324] loop2: detected capacity change from 0 to 256 [ 244.409004][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.443084][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.475696][ T7329] loop4: detected capacity change from 0 to 1024 [ 244.486380][ T7329] hfsplus: unable to parse mount options [ 244.493603][ T7232] bridge_slave_0: entered allmulticast mode [ 244.508245][ T7232] bridge_slave_0: entered promiscuous mode [ 244.543409][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.560541][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.577966][ T7232] bridge_slave_1: entered allmulticast mode [ 244.587699][ T7232] bridge_slave_1: entered promiscuous mode [ 244.646844][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.5.526'. [ 244.845904][ T6187] hsr_slave_0: left promiscuous mode [ 244.875162][ T6187] hsr_slave_1: left promiscuous mode [ 244.883704][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.900660][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.942660][ T6187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.038378][ T5243] Bluetooth: hci4: command tx timeout [ 245.211593][ T6187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.770606][ T6187] veth1_macvtap: left promiscuous mode [ 245.776370][ T6187] veth0_macvtap: left promiscuous mode [ 245.781420][ T5466] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 245.815008][ T6187] veth1_vlan: left promiscuous mode [ 245.820560][ T6187] veth0_vlan: left promiscuous mode [ 245.976336][ T7347] loop5: detected capacity change from 0 to 2048 [ 245.997334][ T7347] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 246.019224][ T7347] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 246.020038][ T5466] usb 3-1: Using ep0 maxpacket: 16 [ 246.055799][ T7347] UDF-fs: Scanning with blocksize 512 failed [ 246.073290][ T5466] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 246.096598][ T7347] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 246.101718][ T5466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.109481][ T7347] UDF-fs: Scanning with blocksize 1024 failed [ 246.133680][ T7347] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 246.140121][ T5466] usb 3-1: Product: syz [ 246.147529][ T5466] usb 3-1: Manufacturer: syz [ 246.150119][ T7347] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 246.156186][ T5466] usb 3-1: SerialNumber: syz [ 246.170606][ T7347] UDF-fs: Scanning with blocksize 2048 failed [ 246.189288][ T7347] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 246.194703][ T5466] r8152-cfgselector 3-1: Unknown version 0x0000 [ 246.225561][ T5466] r8152-cfgselector 3-1: config 0 descriptor?? [ 246.239593][ T7347] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 246.262784][ T7347] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 246.271066][ T7347] UDF-fs: Scanning with blocksize 4096 failed [ 246.279922][ T7347] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 246.462120][ T5466] r8152-cfgselector 3-1: Unknown version 0x0000 [ 246.483728][ T5466] r8152-cfgselector 3-1: bad CDC descriptors [ 247.115767][ T5436] r8152-cfgselector 3-1: USB disconnect, device number 5 [ 247.469727][ T7357] loop5: detected capacity change from 0 to 256 [ 247.945184][ T7361] vhci_hcd: invalid port number 129 [ 247.950515][ T7361] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 248.716596][ T6187] team0 (unregistering): Port device team_slave_1 removed [ 248.758176][ T6187] team0 (unregistering): Port device team_slave_0 removed [ 249.254856][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.300115][ T7367] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 249.347108][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.957410][ T7232] team0: Port device team_slave_0 added [ 250.585887][ T7232] team0: Port device team_slave_1 added [ 250.591666][ T7380] loop5: detected capacity change from 0 to 2048 [ 250.648381][ T7380] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 250.678147][ T7380] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 250.717827][ T7380] UDF-fs: Scanning with blocksize 512 failed [ 250.726781][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.734086][ T7380] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 250.766985][ T7380] UDF-fs: Scanning with blocksize 1024 failed [ 250.816510][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.946741][ T7380] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 251.107487][ T7380] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 251.169810][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.233243][ T7380] UDF-fs: Scanning with blocksize 2048 failed [ 251.443660][ T7380] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 251.485399][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.551064][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.554690][ T7380] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 251.580601][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.660693][ T7380] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 251.668472][ T7380] UDF-fs: Scanning with blocksize 4096 failed [ 251.754529][ T7380] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 252.641109][ T7396] vhci_hcd: invalid port number 129 [ 252.646698][ T7396] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 252.993821][ T7232] hsr_slave_0: entered promiscuous mode [ 253.038417][ T7232] hsr_slave_1: entered promiscuous mode [ 253.070908][ T7232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.099566][ T7232] Cannot create hsr debugfs directory [ 253.361723][ T5437] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 253.570567][ T5437] usb 1-1: Using ep0 maxpacket: 16 [ 253.614435][ T5437] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 253.651046][ T5437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.659110][ T5437] usb 1-1: Product: syz [ 253.721018][ T5437] usb 1-1: Manufacturer: syz [ 253.735498][ T5437] usb 1-1: SerialNumber: syz [ 253.800961][ T5437] r8152-cfgselector 1-1: Unknown version 0x0000 [ 253.829862][ T5437] r8152-cfgselector 1-1: config 0 descriptor?? [ 254.100982][ T5437] r8152-cfgselector 1-1: Unknown version 0x0000 [ 254.116476][ T5437] r8152-cfgselector 1-1: bad CDC descriptors [ 254.196934][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.308613][ T5437] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 254.620957][ T5446] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 255.361443][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.368231][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.423228][ T7065] veth0_vlan: entered promiscuous mode [ 255.443090][ T7065] veth1_vlan: entered promiscuous mode [ 255.500359][ T5235] Bluetooth: hci1: command tx timeout [ 255.611854][ T5446] usb 5-1: Using ep0 maxpacket: 32 [ 255.654736][ T5446] usb 5-1: config 0 has no interfaces? [ 255.672851][ T5446] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 255.704077][ T5446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.732159][ T7065] veth0_macvtap: entered promiscuous mode [ 255.748577][ T5446] usb 5-1: Product: syz [ 255.774085][ T5446] usb 5-1: Manufacturer: syz [ 255.791868][ T5446] usb 5-1: SerialNumber: syz [ 255.826594][ T5446] usb 5-1: config 0 descriptor?? [ 255.899256][ T7065] veth1_macvtap: entered promiscuous mode [ 255.946509][ T7232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.017054][ T7440] loop5: detected capacity change from 0 to 2048 [ 256.040473][ T7440] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 256.062321][ T7232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.094658][ T7440] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 256.136842][ T5469] usb 5-1: USB disconnect, device number 11 [ 256.176236][ T7440] UDF-fs: Scanning with blocksize 512 failed [ 256.200445][ T7232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.234164][ T7440] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 256.270994][ T7440] UDF-fs: Scanning with blocksize 1024 failed [ 256.429039][ T7442] vhci_hcd: invalid port number 129 [ 256.434420][ T7442] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 256.621183][ T7232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.741919][ T7440] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 256.795875][ T7440] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 256.836664][ T7440] UDF-fs: Scanning with blocksize 2048 failed [ 256.877374][ T7440] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 256.895717][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.943698][ T7440] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 256.963748][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.030429][ T7440] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 257.031236][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.038095][ T7440] UDF-fs: Scanning with blocksize 4096 failed [ 257.048751][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.064575][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.075447][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.086056][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.100864][ T7440] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 257.122691][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.152883][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.310746][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.510896][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.842217][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.039783][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.174145][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.206319][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.217072][ T7065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.228308][ T7065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.242307][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.282272][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.656'. [ 258.395693][ T7065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.450305][ T7065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.471990][ T7065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.498467][ T7065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.846541][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.898832][ T7472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.910804][ T2494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.940219][ T2494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.125105][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.133946][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.229082][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.507247][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.532826][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.540245][ T6186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.586104][ T7484] vhci_hcd: invalid port number 129 [ 259.592867][ T7484] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 259.790317][ T5466] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 260.053832][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.061179][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.154297][ T5466] usb 3-1: Using ep0 maxpacket: 32 [ 260.185352][ T5466] usb 3-1: config 0 has no interfaces? [ 260.219913][ T5466] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 260.270125][ T5466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.318031][ T5466] usb 3-1: Product: syz [ 260.399443][ T5466] usb 3-1: Manufacturer: syz [ 260.426850][ T5466] usb 3-1: SerialNumber: syz [ 260.478498][ T5466] usb 3-1: config 0 descriptor?? [ 260.658794][ T7491] loop5: detected capacity change from 0 to 2048 [ 260.685249][ T7491] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 260.737499][ T7491] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 260.777281][ T7491] UDF-fs: Scanning with blocksize 512 failed [ 260.840473][ T5437] usb 3-1: USB disconnect, device number 6 [ 260.869940][ T7491] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 260.931597][ T7491] UDF-fs: Scanning with blocksize 1024 failed [ 260.944672][ T29] audit: type=1326 audit(1725980688.910:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7494 comm="syz.0.670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1b357def9 code=0x0 [ 261.154991][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.164993][ T7491] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 261.249672][ T7491] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 261.336760][ T7491] UDF-fs: Scanning with blocksize 2048 failed [ 261.406550][ T7491] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 261.441778][ T7491] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 261.468889][ T7491] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 261.543445][ T7232] veth0_vlan: entered promiscuous mode [ 261.563082][ T7491] UDF-fs: Scanning with blocksize 4096 failed [ 261.591782][ T7491] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 261.623993][ T7232] veth1_vlan: entered promiscuous mode [ 261.823044][ T7232] veth0_macvtap: entered promiscuous mode [ 261.921537][ T7232] veth1_macvtap: entered promiscuous mode [ 266.400813][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.453333][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.517444][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.548705][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.586977][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.630472][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.679654][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.720223][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.750745][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.795726][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.854407][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.905054][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.991046][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.035594][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.098965][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.142783][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.177700][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.220403][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.260762][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.288393][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.326669][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.350209][ T5467] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.404408][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.444450][ T7232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.460837][ T7232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.470622][ T7232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.503160][ T7232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.560635][ T5467] usb 4-1: Using ep0 maxpacket: 32 [ 267.597368][ T5467] usb 4-1: config 0 has no interfaces? [ 267.634990][ T5467] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 267.679729][ T5467] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.692616][ T5469] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 267.709627][ T5467] usb 4-1: Product: syz [ 267.735439][ T5467] usb 4-1: Manufacturer: syz [ 267.755702][ T5467] usb 4-1: SerialNumber: syz [ 267.787122][ T5467] usb 4-1: config 0 descriptor?? [ 267.828494][ T2494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.856964][ T2494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.910242][ T5469] usb 1-1: Using ep0 maxpacket: 16 [ 267.929092][ T5469] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.962285][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.981079][ T5469] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.011759][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.045917][ T5469] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 268.058875][ T5466] usb 4-1: USB disconnect, device number 6 [ 268.079205][ T5469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.117892][ T5469] usb 1-1: Product: syz [ 268.128372][ T5469] usb 1-1: Manufacturer: syz [ 268.137666][ T5469] usb 1-1: SerialNumber: syz [ 268.165991][ T5469] usb 1-1: config 0 descriptor?? [ 268.215148][ T5469] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 268.408040][ T5469] usb 1-1: USB disconnect, device number 5 [ 268.470431][ T35] usb 1-1: Failed to submit usb control message: -71 [ 268.505248][ T35] usb 1-1: unable to send the bmi data to the device: -71 [ 268.553592][ T35] usb 1-1: unable to get target info from device [ 268.597824][ T35] usb 1-1: could not get target info (-71) [ 268.635812][ T35] usb 1-1: could not probe fw (-71) [ 269.397300][ T7583] netlink: 72 bytes leftover after parsing attributes in process `syz.0.703'. [ 270.070499][ T5437] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 271.090101][ T5437] usb 4-1: Using ep0 maxpacket: 32 [ 271.120363][ T5437] usb 4-1: config 0 has no interfaces? [ 271.150336][ T5437] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 271.162094][ T5437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.190077][ T5437] usb 4-1: Product: syz [ 271.200046][ T5437] usb 4-1: Manufacturer: syz [ 271.215169][ T5437] usb 4-1: SerialNumber: syz [ 271.266032][ T5437] usb 4-1: config 0 descriptor?? [ 272.218819][ T5437] usb 4-1: USB disconnect, device number 7 [ 272.623311][ T7634] netlink: 72 bytes leftover after parsing attributes in process `syz.0.721'. [ 272.797833][ T7638] capability: warning: `syz.2.724' uses deprecated v2 capabilities in a way that may be insecure [ 273.204216][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 275.420971][ T5466] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 275.620131][ T5466] usb 3-1: Using ep0 maxpacket: 32 [ 275.708690][ T5437] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 275.841578][ T7696] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 275.980958][ T5437] usb 1-1: Using ep0 maxpacket: 16 [ 276.101152][ T5437] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 276.234756][ T5437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.549052][ T5466] usb 3-1: config 0 has no interfaces? [ 276.558380][ T5466] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 276.580051][ T5466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.589423][ T5466] usb 3-1: Product: syz [ 276.596992][ T5466] usb 3-1: Manufacturer: syz [ 276.601290][ T5437] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 276.601663][ T5466] usb 3-1: SerialNumber: syz [ 276.604848][ T5466] usb 3-1: config 0 descriptor?? [ 276.679083][ T5437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.739873][ T5437] usb 1-1: Product: syz [ 276.772560][ T5437] usb 1-1: Manufacturer: syz [ 276.778494][ T5437] usb 1-1: SerialNumber: syz [ 276.812562][ T5437] usb 1-1: config 0 descriptor?? [ 276.815486][ T7704] loop4: detected capacity change from 0 to 256 [ 276.854296][ T5437] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 276.864609][ T7704] vfat: Bad value for 'dmask' [ 276.950728][ T5446] usb 3-1: USB disconnect, device number 7 [ 277.056705][ T5469] usb 1-1: USB disconnect, device number 6 [ 277.061857][ T2494] usb 1-1: Failed to submit usb control message: -71 [ 277.082905][ T2494] usb 1-1: unable to send the bmi data to the device: -71 [ 277.104024][ T2494] usb 1-1: unable to get target info from device [ 277.111135][ T2494] usb 1-1: could not get target info (-71) [ 277.117166][ T2494] usb 1-1: could not probe fw (-71) [ 277.250168][ T5466] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 277.408631][ T7724] netlink: 'syz.1.755': attribute type 25 has an invalid length. [ 277.427136][ T7724] netlink: 'syz.1.755': attribute type 7 has an invalid length. [ 277.452376][ T5466] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.493023][ T5466] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.520686][ T5466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.549761][ T5466] usb 5-1: Product: syz [ 277.558903][ T5466] usb 5-1: Manufacturer: syz [ 277.574072][ T5466] usb 5-1: SerialNumber: syz [ 277.627014][ T5466] cdc_ether 5-1:1.0: skipping garbage [ 277.656121][ T5466] usb 5-1: bad CDC descriptors [ 277.975241][ T7704] loop4: detected capacity change from 0 to 1024 [ 278.007451][ T7704] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.091603][ T7744] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 278.302275][ T7704] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 278.591854][ T7704] EXT4-fs (loop4): orphan cleanup on readonly fs [ 278.598791][ T7704] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.750: Freeing blocks not in datazone - block = 0, count = 4096 [ 278.769326][ T7704] EXT4-fs (loop4): 1 orphan inode deleted [ 278.805305][ T7704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 279.024085][ T7704] usb usb9: usbfs: process 7704 (syz.4.750) did not claim interface 0 before use [ 279.057444][ T7704] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 279.118647][ T5299] usb 5-1: USB disconnect, device number 12 [ 279.517780][ T7772] netlink: 'syz.3.773': attribute type 25 has an invalid length. [ 279.526066][ T7772] netlink: 'syz.3.773': attribute type 7 has an invalid length. [ 279.640476][ T5437] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 279.765470][ T5228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.860115][ T5437] usb 2-1: Using ep0 maxpacket: 32 [ 279.915736][ T5437] usb 2-1: config 0 has no interfaces? [ 279.925772][ T5437] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 279.962189][ T5437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.000995][ T5437] usb 2-1: Product: syz [ 280.016109][ T5437] usb 2-1: Manufacturer: syz [ 280.049228][ T5437] usb 2-1: SerialNumber: syz [ 280.064778][ T5437] usb 2-1: config 0 descriptor?? [ 280.309188][ T5446] usb 2-1: USB disconnect, device number 6 [ 280.918324][ T7810] netlink: 'syz.0.789': attribute type 25 has an invalid length. [ 280.968320][ T7810] netlink: 'syz.0.789': attribute type 7 has an invalid length. [ 281.351863][ T7831] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 281.386124][ T7831] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.798'. [ 282.040823][ T7850] loop4: detected capacity change from 0 to 2048 [ 282.060242][ T5243] Bluetooth: hci1: command tx timeout [ 282.121022][ T7850] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 282.207742][ T7850] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 282.291379][ T5467] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 282.343510][ T7850] UDF-fs: Scanning with blocksize 512 failed [ 282.856672][ T7850] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 282.910062][ T7850] UDF-fs: Scanning with blocksize 1024 failed [ 282.920290][ T5467] usb 1-1: Using ep0 maxpacket: 32 [ 282.960462][ T5467] usb 1-1: config 0 has no interfaces? [ 283.000918][ T5467] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 283.012222][ T7850] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 283.059852][ T5467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.088856][ T7850] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 283.116359][ T5467] usb 1-1: Product: syz [ 283.140368][ T7850] UDF-fs: Scanning with blocksize 2048 failed [ 283.147905][ T5467] usb 1-1: Manufacturer: syz [ 283.170306][ T5467] usb 1-1: SerialNumber: syz [ 283.185243][ T7850] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 283.218219][ T7858] netlink: 'syz.1.808': attribute type 25 has an invalid length. [ 283.237623][ T7850] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 283.589219][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f05a400: rx timeout, send abort [ 283.599743][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f05a400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 283.842363][ T7858] netlink: 'syz.1.808': attribute type 7 has an invalid length. [ 284.129442][ T7850] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 284.289793][ T5467] usb 1-1: config 0 descriptor?? [ 284.310450][ T7850] UDF-fs: Scanning with blocksize 4096 failed [ 284.341771][ T7850] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 284.583565][ T5467] usb 1-1: USB disconnect, device number 7 [ 284.758005][ T7868] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 284.786376][ T7868] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.813'. [ 285.007800][ C0] vcan0: j1939_tp_rxtimer: 0xffff888029462800: rx timeout, send abort [ 285.016239][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022bbcc00: rx timeout, send abort [ 285.026816][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888029462800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 285.042610][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022bbcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 286.103441][ T7904] netlink: 'syz.2.829': attribute type 1 has an invalid length. [ 286.126969][ T7904] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.829'. [ 287.049523][ T7930] loop3: detected capacity change from 0 to 128 [ 287.391247][ T7926] netlink: 'syz.3.837': attribute type 9 has an invalid length. [ 287.579048][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061ac3400: rx timeout, send abort [ 287.598656][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061ac3400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.697035][ T7926] netlink: 'syz.3.837': attribute type 6 has an invalid length. [ 288.518923][ T7935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.839'. [ 288.871408][ T7941] loop4: detected capacity change from 0 to 16 [ 288.908220][ T7941] erofs: (device loop4): mounted with root inode @ nid 36. [ 289.022052][ T7943] vlan2: entered allmulticast mode [ 289.059430][ T7943] bond0: entered allmulticast mode [ 289.070120][ T7943] bond_slave_0: entered allmulticast mode [ 289.070148][ T7943] bond_slave_1: entered allmulticast mode [ 289.077986][ T7943] bond0: left allmulticast mode [ 289.078007][ T7943] bond_slave_0: left allmulticast mode [ 289.078026][ T7943] bond_slave_1: left allmulticast mode [ 289.137603][ T7946] overlayfs: missing 'lowerdir' [ 289.234441][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061ac3c00: rx timeout, send abort [ 289.734599][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061ac3c00: abort rx timeout. Force session deactivation [ 289.866037][ T7953] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 289.885589][ T5228] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 289.898673][ T7953] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.847'. [ 289.955713][ T5228] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 290.248872][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'. [ 290.774209][ T7970] netlink: 'syz.3.855': attribute type 25 has an invalid length. [ 290.813904][ T7970] netlink: 'syz.3.855': attribute type 7 has an invalid length. [ 291.064183][ T2494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.135037][ T7976] netlink: 'syz.2.854': attribute type 6 has an invalid length. [ 291.294743][ T2494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.571297][ T2494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.820830][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f26a800: rx timeout, send abort [ 292.829522][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807f26a800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 293.513693][ T2494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.802690][ T2494] bridge_slave_1: left allmulticast mode [ 293.808391][ T2494] bridge_slave_1: left promiscuous mode [ 293.840259][ T2494] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.865047][ T7994] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 293.869623][ T2494] bridge_slave_0: left allmulticast mode [ 293.879812][ T2494] bridge_slave_0: left promiscuous mode [ 293.894053][ T7996] loop2: detected capacity change from 0 to 128 [ 293.904738][ T2494] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.910122][ T7994] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.864'. [ 293.922387][ T7996] EXT4-fs: Ignoring removed nobh option [ 294.029834][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.031980][ T7996] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.042714][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.091141][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.112103][ T7996] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.116703][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.138770][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.147315][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.217894][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880558e7c00: rx timeout, send abort [ 294.226320][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880558e6c00: rx timeout, send abort [ 294.235393][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880558e7c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 294.249846][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880558e6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 294.602804][ T6828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.606229][ T8011] loop5: detected capacity change from 0 to 256 [ 294.638439][ T8011] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.224202][ T5235] Bluetooth: hci0: command tx timeout [ 297.175875][ T8030] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 297.196632][ T8030] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.877'. [ 297.392134][ T8032] loop2: detected capacity change from 0 to 512 [ 297.400608][ T8032] EXT4-fs: Ignoring removed orlov option [ 297.430702][ T2494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.445456][ T8032] EXT4-fs (loop2): Test dummy encryption mode enabled [ 297.472411][ T8032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a054e09c, mo2=0002] [ 297.486687][ T2494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.498067][ T8032] System zones: 1-12 [ 297.515763][ T2494] bond0 (unregistering): Released all slaves [ 297.530368][ T8032] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.878: casefold flag without casefold feature [ 297.644553][ T8032] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.878: couldn't read orphan inode 15 (err -117) [ 297.713891][ T8013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 297.727725][ T8032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.319598][ T8044] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 298.368356][ T5235] Bluetooth: hci0: command tx timeout [ 299.109353][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 299.475675][ T8063] netlink: 'syz.1.889': attribute type 1 has an invalid length. [ 299.516548][ T8063] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.889'. [ 299.553595][ T8065] loop5: detected capacity change from 0 to 1024 [ 300.009146][ T8070] ISOFS: Unable to identify CD-ROM format. [ 300.460951][ T5235] Bluetooth: hci0: command tx timeout [ 300.673804][ T2494] hsr_slave_0: left promiscuous mode [ 300.731987][ T2494] hsr_slave_1: left promiscuous mode [ 300.762517][ T2494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.796052][ T2494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.828850][ T2494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.849859][ T2494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.995499][ T2494] veth1_macvtap: left promiscuous mode [ 301.014383][ T2494] veth0_macvtap: left promiscuous mode [ 301.024391][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 301.041951][ T2494] veth1_vlan: left promiscuous mode [ 301.055647][ T2494] veth0_vlan: left promiscuous mode [ 302.265673][ T2494] team0 (unregistering): Port device macvlan1 removed [ 302.376956][ T8094] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 302.549037][ T5243] Bluetooth: hci0: command tx timeout [ 303.332233][ T6828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.428147][ T5243] Bluetooth: hci6: command 0x0406 tx timeout [ 304.117275][ T8113] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 304.157276][ T8113] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.903'. [ 304.179521][ T2494] team0 (unregistering): Port device team_slave_1 removed [ 304.344643][ T2494] team0 (unregistering): Port device team_slave_0 removed [ 304.680024][ T8121] ISOFS: Unable to identify CD-ROM format. [ 306.358142][ T8137] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 307.038169][ T8139] loop2: detected capacity change from 0 to 512 [ 307.083712][ T8139] EXT4-fs: Ignoring removed orlov option [ 307.105511][ T8139] EXT4-fs (loop2): Test dummy encryption mode enabled [ 307.166131][ T8139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a054e09c, mo2=0002] [ 307.174310][ T8139] System zones: 1-12 [ 307.185798][ T8139] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.909: casefold flag without casefold feature [ 307.224938][ T8139] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.909: couldn't read orphan inode 15 (err -117) [ 307.258053][ T8139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.896027][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 308.116126][ T8159] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 308.128835][ T8159] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.915'. [ 308.506097][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 309.067045][ T8172] ISOFS: Unable to identify CD-ROM format. [ 309.925270][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.940470][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.947709][ T7998] bridge_slave_0: entered allmulticast mode [ 309.967685][ T7998] bridge_slave_0: entered promiscuous mode [ 310.001645][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.021717][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.045497][ T7998] bridge_slave_1: entered allmulticast mode [ 310.078492][ T7998] bridge_slave_1: entered promiscuous mode [ 310.359811][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.404554][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.605880][ T7998] team0: Port device team_slave_0 added [ 310.637308][ T7998] team0: Port device team_slave_1 added [ 310.879116][ T8196] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 310.908323][ T8196] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.927'. [ 310.965194][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.012565][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.091450][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.131325][ T8201] loop5: detected capacity change from 0 to 128 [ 311.138471][ T8201] EXT4-fs: Ignoring removed nobh option [ 311.147665][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.187462][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.226100][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.247410][ T8201] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.532224][ T8210] ISOFS: Unable to identify CD-ROM format. [ 311.877966][ T6828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.006087][ T8201] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.331844][ T7998] hsr_slave_0: entered promiscuous mode [ 312.372705][ T7998] hsr_slave_1: entered promiscuous mode [ 312.401446][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.430394][ T7998] Cannot create hsr debugfs directory [ 312.654556][ T6830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 312.912531][ T8235] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 312.930163][ T8235] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.941'. [ 313.456281][ T8246] ISOFS: Unable to identify CD-ROM format. [ 314.663962][ T7998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.697737][ T7998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.743280][ T7998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.797696][ T7998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.018056][ T8272] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 315.048441][ T8272] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.956'. [ 315.133948][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.189524][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.244842][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.252056][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.324820][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.332046][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.778986][ T8288] ISOFS: Unable to identify CD-ROM format. [ 315.933414][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033d5f800: rx timeout, send abort [ 315.950088][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033d5f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 316.574154][ T8294] netlink: 'syz.0.963': attribute type 25 has an invalid length. [ 316.592678][ T8294] netlink: 'syz.0.963': attribute type 7 has an invalid length. [ 316.713836][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.927499][ T8314] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 317.936660][ T8314] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.969'. [ 317.938236][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.825580][ T8339] iso9660: Unknown parameter '' [ 319.120866][ T5254] Bluetooth: hci1: command 0x0406 tx timeout [ 319.129050][ T5254] Bluetooth: hci3: command 0x0406 tx timeout [ 319.886449][ T7998] veth0_vlan: entered promiscuous mode [ 319.900934][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 320.003844][ T7998] veth1_vlan: entered promiscuous mode [ 320.115346][ T8351] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 320.145169][ T8351] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.983'. [ 320.171702][ T7998] veth0_macvtap: entered promiscuous mode [ 320.197069][ T7998] veth1_macvtap: entered promiscuous mode [ 320.282767][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.304103][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.325144][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.339284][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.363889][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.381701][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.396990][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.416450][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.436762][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.449184][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.473148][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.625628][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.670087][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.696624][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.728057][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.753501][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.802644][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.835584][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.972594][ T8371] iso9660: Unknown parameter '' [ 321.054413][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bae3400: rx timeout, send abort [ 321.070107][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bae3400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 321.111955][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.566080][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.772262][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.795954][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.879342][ T8376] autofs: Bad value for 'fd' [ 321.955361][ T7998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.010144][ T7998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.032534][ T7998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.070091][ T7998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.093340][ T8379] loop3: detected capacity change from 0 to 256 [ 322.138894][ T8379] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.458654][ T8385] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00106019, b_size=4096, device sda1 blocksize: 4096 [ 322.504601][ T8385] grow_buffers: requested out-of-range block 144115188075855872 for device sda1 [ 322.520572][ T8385] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 322.524245][ T8393] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 322.539955][ T2502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.559194][ T2502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.633435][ T8390] netlink: 'syz.5.998': attribute type 1 has an invalid length. [ 322.651574][ T8390] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.998'. [ 322.671777][ T2502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.715593][ T2502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.131987][ T8409] iso9660: Unknown parameter '' [ 324.170807][ T8423] loop4: detected capacity change from 0 to 256 [ 324.211417][ T8423] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.315062][ T8428] netlink: 'syz.3.1014': attribute type 25 has an invalid length. [ 324.343790][ T8428] netlink: 'syz.3.1014': attribute type 7 has an invalid length. [ 324.611598][ T8439] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 324.641956][ T8439] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1017'. [ 325.013887][ T8451] netlink: 'syz.4.1022': attribute type 4 has an invalid length. [ 325.053927][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062feb000: rx timeout, send abort [ 325.062519][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062feb000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 325.148356][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 325.420754][ T5444] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 325.644125][ T5444] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.698098][ T5444] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.726306][ T8477] netlink: 'syz.1.1030': attribute type 25 has an invalid length. [ 325.786305][ T5444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.800257][ T8477] netlink: 'syz.1.1030': attribute type 7 has an invalid length. [ 325.844023][ T5444] usb 4-1: config 0 descriptor?? [ 325.949537][ T8484] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 326.721019][ T5444] pwc: Askey VC010 type 2 USB webcam detected. [ 326.971750][ T5444] pwc: send_video_command error -71 [ 327.021886][ T5444] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 327.056352][ T8492] geneve2: entered promiscuous mode [ 327.063822][ T8492] geneve2: entered allmulticast mode [ 327.082601][ T5444] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 327.085189][ T8493] netlink: 'syz.1.1034': attribute type 1 has an invalid length. [ 327.123014][ T5444] usb 4-1: USB disconnect, device number 8 [ 327.128872][ T8493] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1034'. [ 327.702392][ T5444] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 327.827574][ T8517] netlink: 'syz.4.1046': attribute type 25 has an invalid length. [ 327.860627][ T8517] netlink: 'syz.4.1046': attribute type 7 has an invalid length. [ 327.911829][ T5444] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.943294][ T5444] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.987998][ T5444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.013157][ T5444] usb 4-1: config 0 descriptor?? [ 328.033125][ T5444] pwc: Askey VC010 type 2 USB webcam detected. [ 328.332223][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c9bf800: rx timeout, send abort [ 328.339868][ T8527] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 328.341769][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c9bf800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 328.455841][ T8528] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 328.510533][ T8528] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1050'. [ 329.100963][ T5444] pwc: recv_control_msg error -32 req 02 val 2b00 [ 329.140972][ T5444] pwc: recv_control_msg error -32 req 02 val 2700 [ 329.160575][ T5444] pwc: recv_control_msg error -32 req 02 val 2c00 [ 329.187976][ T5444] pwc: recv_control_msg error -32 req 04 val 1000 [ 329.240542][ T5444] pwc: recv_control_msg error -32 req 04 val 1300 [ 329.256029][ T5444] pwc: recv_control_msg error -32 req 04 val 1400 [ 329.289859][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 329.490299][ T5444] pwc: recv_control_msg error -32 req 02 val 2100 [ 329.504450][ T5444] pwc: recv_control_msg error -32 req 04 val 1500 [ 329.521061][ T8536] loop5: detected capacity change from 0 to 128 [ 330.052132][ T5444] pwc: recv_control_msg error -32 req 02 val 2500 [ 330.115769][ T8536] EXT4-fs: Ignoring removed nobh option [ 330.313140][ T5444] pwc: recv_control_msg error -71 req 02 val 2400 [ 330.325958][ T5444] pwc: recv_control_msg error -71 req 02 val 2600 [ 330.333039][ T8536] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 330.368706][ T5444] pwc: recv_control_msg error -71 req 02 val 2900 [ 330.440398][ T5444] pwc: recv_control_msg error -71 req 02 val 2800 [ 330.490870][ T8536] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 330.502688][ T5444] pwc: recv_control_msg error -71 req 04 val 1100 [ 330.533732][ T5444] pwc: recv_control_msg error -71 req 04 val 1200 [ 330.585683][ T5444] pwc: Registered as video71. [ 330.629799][ T5444] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 330.737130][ T5444] usb 4-1: USB disconnect, device number 9 [ 330.956286][ T8565] netlink: 'syz.1.1062': attribute type 25 has an invalid length. [ 330.964970][ T8565] netlink: 'syz.1.1062': attribute type 7 has an invalid length. [ 330.981558][ T6830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 331.393061][ T8572] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 332.214576][ T8577] netlink: 'syz.5.1066': attribute type 1 has an invalid length. [ 332.652961][ T8577] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.1066'. [ 332.780203][ T5235] Bluetooth: hci0: command tx timeout [ 333.049498][ T8589] Driver unsupported XDP return value 0 on prog (id 378) dev N/A, expect packet loss! [ 333.065418][ T8589] TCP: TCP_TX_DELAY enabled [ 334.252781][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'. [ 334.370194][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 334.748256][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.754830][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.761407][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.767907][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.774445][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.781625][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.788110][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.794620][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.801136][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.807618][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 334.912788][ T8611] netlink: 'syz.1.1079': attribute type 25 has an invalid length. [ 334.932254][ T8611] netlink: 'syz.1.1079': attribute type 7 has an invalid length. [ 335.038601][ T8612] loop3: detected capacity change from 0 to 128 [ 335.086605][ T8612] EXT4-fs: Ignoring removed nobh option [ 335.198417][ T8612] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 335.213462][ T8618] geneve2: entered promiscuous mode [ 335.218852][ T8618] geneve2: entered allmulticast mode [ 335.266968][ T8612] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 335.565271][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880693f9000: rx timeout, send abort [ 335.627774][ T8630] netlink: 'syz.5.1085': attribute type 1 has an invalid length. [ 335.653213][ T8630] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.1085'. [ 335.846078][ T7065] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.073680][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880693f9000: abort rx timeout. Force session deactivation [ 336.251365][ T8652] netlink: 'syz.1.1095': attribute type 25 has an invalid length. [ 336.274391][ T8652] netlink: 'syz.1.1095': attribute type 7 has an invalid length. [ 336.327435][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 336.390188][ T5466] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 336.643210][ T5466] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.682563][ T5466] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.723325][ T5466] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.779737][ T5466] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 336.844862][ T5466] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 337.094258][ T5466] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.325674][ T5466] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.694854][ T5466] usb 1-1: Product: syz [ 337.699080][ T5466] usb 1-1: Manufacturer: syz [ 337.710192][ T5235] Bluetooth: hci0: command tx timeout [ 337.782518][ T5466] cdc_wdm 1-1:1.0: skipping garbage [ 337.836201][ T5466] cdc_wdm 1-1:1.0: skipping garbage [ 337.896997][ T5466] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 337.938554][ T5466] cdc_wdm 1-1:1.0: Unknown control protocol [ 337.982268][ T8641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.018308][ T8641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.077909][ T8673] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 338.100069][ T8673] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1103'. [ 338.217590][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1099'. [ 338.241204][ T8679] loop2: detected capacity change from 0 to 128 [ 338.251490][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.258105][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.264469][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.267796][ T8679] EXT4-fs: Ignoring removed nobh option [ 338.271063][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.271495][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.289562][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.295921][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.302534][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.308840][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.315442][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.321708][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.328316][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.334600][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.341215][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.347504][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.354103][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.360382][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.366978][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.373276][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 338.379875][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 338.403711][ T5464] usb 1-1: USB disconnect, device number 8 [ 338.417028][ T8679] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.449660][ T8679] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 338.577327][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a6b8c00: rx timeout, send abort [ 338.903623][ T8692] netlink: 'syz.0.1109': attribute type 7 has an invalid length. [ 338.966178][ T8692] netlink: 'syz.0.1109': attribute type 39 has an invalid length. [ 338.996332][ T8694] netlink: 'syz.4.1110': attribute type 25 has an invalid length. [ 339.031787][ T8694] netlink: 'syz.4.1110': attribute type 7 has an invalid length. [ 339.085645][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a6b8c00: abort rx timeout. Force session deactivation [ 339.162805][ T6828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.930115][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 341.291783][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1114'. [ 341.547339][ T8711] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 341.612236][ T8713] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 341.624073][ T8708] IPVS: stopping backup sync thread 8711 ... [ 341.640404][ T8713] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1118'. [ 341.917263][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803015bc00: rx timeout, send abort [ 341.925926][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803015a400: rx timeout, send abort [ 341.934505][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803015bc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 341.949690][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803015a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 342.234883][ T8732] loop4: detected capacity change from 0 to 512 [ 342.247886][ T8732] EXT4-fs: Ignoring removed orlov option [ 342.289399][ T8732] EXT4-fs (loop4): Test dummy encryption mode enabled [ 342.340349][ T5469] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 342.393126][ T8732] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a054e09c, mo2=0002] [ 342.462627][ T8732] System zones: 1-12 [ 342.540411][ T8732] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1127: casefold flag without casefold feature [ 342.576988][ T8732] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1127: couldn't read orphan inode 15 (err -117) [ 342.578098][ T5469] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 342.606739][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1129'. [ 342.618847][ T5469] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.638534][ T5469] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 342.650330][ T5469] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 342.679573][ T8732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.722507][ T5469] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 342.758008][ T5469] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.779200][ T5469] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.800090][ T5469] usb 2-1: Product: syz [ 342.819458][ T5469] usb 2-1: Manufacturer: syz [ 342.865125][ T5469] cdc_wdm 2-1:1.0: skipping garbage [ 342.876213][ T5469] cdc_wdm 2-1:1.0: skipping garbage [ 342.906234][ T5469] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 342.956846][ T5469] cdc_wdm 2-1:1.0: Unknown control protocol [ 343.073177][ T8749] netlink: 'syz.2.1133': attribute type 1 has an invalid length. [ 343.092248][ T8719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.123525][ T8749] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1133'. [ 343.159703][ T8719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.340275][ T5245] Bluetooth: hci4: command tx timeout [ 343.403018][ C1] wdm_int_callback: 83 callbacks suppressed [ 343.403038][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.415519][ C1] wdm_int_callback: 83 callbacks suppressed [ 343.415533][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.427670][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.434267][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.440558][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.447154][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.453875][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.460462][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.466709][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.473289][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.479539][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.486224][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.492491][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.499169][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.505439][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.512052][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.518379][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.524967][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.531384][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 343.537964][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 343.622106][ T5446] usb 2-1: USB disconnect, device number 7 [ 344.074678][ T8769] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1140'. [ 344.078896][ T8767] loop3: detected capacity change from 0 to 128 [ 344.091544][ T8763] syz.2.1139[8763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.091720][ T8763] syz.2.1139[8763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 344.105717][ T8767] EXT4-fs: Ignoring removed nobh option [ 344.184197][ T8767] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.201634][ T8767] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 344.248823][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1127'. [ 344.380402][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 344.460138][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 344.568974][ T7065] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.140670][ T5299] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 346.202354][ T8787] netlink: 'syz.1.1147': attribute type 1 has an invalid length. [ 346.230834][ T8787] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1147'. [ 346.279181][ T8786] bridge1: entered promiscuous mode [ 346.316316][ T8786] bridge1: entered allmulticast mode [ 346.371325][ T5299] usb 6-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 346.391293][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 346.411045][ T5299] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 346.433062][ T5299] usb 6-1: config 255 has no interfaces? [ 346.438860][ T5299] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 346.456178][ T5299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.717246][ T5299] usb 6-1: string descriptor 0 read error: -71 [ 346.724162][ T8805] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1154'. [ 346.765416][ T5299] usb 6-1: USB disconnect, device number 8 [ 347.472047][ T5436] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 347.574406][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.582908][ T8828] netlink: 'syz.1.1165': attribute type 1 has an invalid length. [ 347.598196][ T5464] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 347.633493][ T8828] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1165'. [ 347.918109][ T8836] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1169'. [ 347.932107][ T5436] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 347.941105][ T5436] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.953347][ T5436] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 347.962940][ T5436] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 347.974476][ T5436] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 347.988575][ T5436] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 347.998998][ T5436] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 348.008108][ T5436] usb 3-1: Product: syz [ 348.012354][ T5436] usb 3-1: Manufacturer: syz [ 348.020153][ T5464] usb 1-1: Using ep0 maxpacket: 8 [ 348.027588][ T5464] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.041499][ T5464] usb 1-1: config 0 has no interfaces? [ 348.053014][ T5436] cdc_wdm 3-1:1.0: skipping garbage [ 348.058646][ T5436] cdc_wdm 3-1:1.0: skipping garbage [ 348.070072][ T5464] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=c3.3e [ 348.079129][ T5464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.092837][ T5436] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 348.092861][ T5436] cdc_wdm 3-1:1.0: Unknown control protocol [ 348.100793][ T5464] usb 1-1: Product: syz [ 348.100817][ T5464] usb 1-1: Manufacturer: syz [ 348.100838][ T5464] usb 1-1: SerialNumber: syz [ 348.113966][ T5464] usb 1-1: config 0 descriptor?? [ 348.274153][ T8845] netlink: 'syz.1.1172': attribute type 25 has an invalid length. [ 348.299565][ T8813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.308808][ T8845] netlink: 'syz.1.1172': attribute type 7 has an invalid length. [ 348.323064][ T8840] vhci_hcd: invalid port number 129 [ 348.328289][ T8840] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 348.402234][ T8813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.442076][ T5446] usb 1-1: USB disconnect, device number 9 [ 348.514388][ T8849] loop3: detected capacity change from 0 to 128 [ 348.530247][ T8849] EXT4-fs: Ignoring removed nobh option [ 348.576252][ T8849] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.577012][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1175'. [ 348.610372][ T8849] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.665031][ C0] wdm_int_callback: 384 callbacks suppressed [ 348.665052][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.678165][ C0] wdm_int_callback: 384 callbacks suppressed [ 348.678187][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.690547][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.697164][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.703640][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.710256][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.716583][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.723195][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.729521][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.736126][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.742447][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.749053][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.755381][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.761982][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.768300][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.774909][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.781263][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.787873][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.794250][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 348.800850][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 348.848311][ T7065] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 348.905219][ T5466] usb 3-1: USB disconnect, device number 8 [ 349.252801][ T8867] loop2: detected capacity change from 0 to 512 [ 349.260291][ T5235] Bluetooth: hci4: command tx timeout [ 349.308361][ T8871] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 349.311014][ T8867] EXT4-fs: Ignoring removed orlov option [ 349.318066][ T8871] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1181'. [ 349.400334][ T8867] EXT4-fs (loop2): Test dummy encryption mode enabled [ 349.441079][ T8867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a054e09c, mo2=0002] [ 349.450840][ T8867] System zones: 1-12 [ 349.455570][ T8867] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1179: casefold flag without casefold feature [ 349.470483][ T8867] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1179: couldn't read orphan inode 15 (err -117) [ 349.491933][ T8867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.597869][ T8878] loop5: detected capacity change from 0 to 2048 [ 349.741740][ T8883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1184'. [ 349.808800][ T8878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.823014][ T8885] netlink: 'syz.0.1187': attribute type 25 has an invalid length. [ 349.871763][ T8885] netlink: 'syz.0.1187': attribute type 7 has an invalid length. [ 349.980099][ T8889] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 350.762998][ T8853] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 350.861556][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 350.863445][ T8899] loop3: detected capacity change from 0 to 256 [ 350.956122][ T8899] vfat: Bad value for 'uid' [ 351.004468][ T8899] vfat: Bad value for 'uid' [ 351.035721][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 351.312549][ T8912] 9pnet_virtio: no channels available for device syz [ 351.411641][ T8914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1195'. [ 351.562324][ T8918] netlink: 'syz.4.1196': attribute type 1 has an invalid length. [ 351.614533][ T8918] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1196'. [ 351.850763][ T8927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1200'. [ 352.070380][ T8931] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 352.116673][ T6830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.503719][ T8939] loop5: detected capacity change from 0 to 128 [ 352.561131][ T8939] EXT4-fs: Ignoring removed nobh option [ 352.622315][ T8939] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.780632][ T8939] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 352.891481][ T5235] Bluetooth: hci4: command tx timeout [ 352.947116][ T8950] vhci_hcd: invalid port number 129 [ 352.952517][ T8950] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 353.148557][ T6828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.275438][ T6830] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.310424][ T8960] netlink: 'syz.0.1212': attribute type 1 has an invalid length. [ 353.351913][ T8960] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1212'. [ 353.843204][ T8980] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 353.886147][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1216'. [ 354.370190][ T8989] vhci_hcd: invalid port number 129 [ 354.375410][ T8989] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 354.940235][ T5243] Bluetooth: hci4: command tx timeout [ 355.049298][ T4681] udevd[4681]: worker [6695] terminated by signal 33 (Unknown signal 33) [ 355.066059][ T4681] udevd[4681]: worker [6695] failed while handling '/devices/virtual/block/loop3' [ 355.179611][ T9017] netlink: 'syz.1.1235': attribute type 1 has an invalid length. [ 355.208396][ T9017] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1235'. [ 355.460448][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 356.844378][ T9024] vhci_hcd: invalid port number 129 [ 356.849625][ T9024] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 357.020339][ T5243] Bluetooth: hci4: command tx timeout [ 357.498456][ T9060] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 357.533655][ T9060] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1255'. [ 358.028749][ T5467] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 358.135272][ T9072] vhci_hcd: invalid port number 129 [ 358.141648][ T9072] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 358.460070][ T5467] usb 3-1: Using ep0 maxpacket: 8 [ 358.467226][ T5467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.491102][ T5467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.511876][ T5467] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 358.528923][ T5467] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.566306][ T5467] usb 3-1: config 0 descriptor?? [ 358.861962][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 358.991390][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 359.076362][ T5467] elo 0003:04E7:0009.0003: unknown main item tag 0x0 [ 359.123990][ T5467] elo 0003:04E7:0009.0003: unknown main item tag 0x0 [ 359.167054][ T5467] elo 0003:04E7:0009.0003: item fetching failed at offset 2/7 [ 359.222426][ T5467] elo 0003:04E7:0009.0003: parse failed [ 359.228762][ T5467] elo 0003:04E7:0009.0003: probe with driver elo failed with error -22 [ 359.340675][ T5467] usb 3-1: USB disconnect, device number 9 [ 359.520296][ T5299] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 359.573073][ T9099] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 359.589373][ T9099] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1271'. [ 359.740235][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 359.793006][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1272'. [ 359.810332][ T5299] usb 4-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 359.889585][ T5299] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 359.997923][ T5299] usb 4-1: config 255 has no interfaces? [ 360.027496][ T5299] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 360.273973][ T5299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.371383][ T9114] vhci_hcd: invalid port number 129 [ 360.376623][ T9114] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 360.745142][ T5467] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 361.017944][ T5299] usb 4-1: string descriptor 0 read error: -71 [ 361.031170][ T5299] usb 4-1: USB disconnect, device number 10 [ 361.114473][ T5467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.156431][ T5467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.200395][ T5467] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 361.219956][ T5467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.275725][ T5467] usb 5-1: config 0 descriptor?? [ 361.365036][ T9125] loop5: detected capacity change from 0 to 256 [ 361.441992][ T9125] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.872501][ T9142] netlink: 'syz.5.1286': attribute type 1 has an invalid length. [ 361.908944][ T9142] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.1286'. [ 362.594727][ T9156] vhci_hcd: invalid port number 129 [ 362.599966][ T9156] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 363.114211][ T5467] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 363.124442][ T5467] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 363.133648][ T5467] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 363.142050][ T5467] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 363.154730][ T5467] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 363.165877][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1292'. [ 363.178286][ T5467] usb 5-1: USB disconnect, device number 13 [ 363.380243][ T9162] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 363.391060][ T9161] IPVS: stopping backup sync thread 9162 ... [ 363.948218][ T9171] loop5: detected capacity change from 0 to 256 [ 364.203947][ T9171] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 364.336683][ T9179] loop4: detected capacity change from 0 to 512 [ 364.376257][ T9181] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 364.399818][ T9179] EXT4-fs: Ignoring removed orlov option [ 364.429319][ T9181] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1304'. [ 364.450286][ T9179] EXT4-fs (loop4): Test dummy encryption mode enabled [ 364.487596][ T9185] syz.0.1303[9185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.487791][ T9185] syz.0.1303[9185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 364.524607][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 364.561157][ T9179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a054e09c, mo2=0002] [ 364.599182][ T9179] System zones: 1-12 [ 364.628055][ T9179] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1301: casefold flag without casefold feature [ 364.696510][ T9179] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1301: couldn't read orphan inode 15 (err -117) [ 364.697564][ T4681] udevd[4681]: worker [6693] terminated by signal 33 (Unknown signal 33) [ 364.799191][ T9179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.813501][ T4681] udevd[4681]: worker [6693] failed while handling '/devices/virtual/block/loop3' [ 365.036091][ T9205] netlink: 'syz.5.1310': attribute type 25 has an invalid length. [ 365.044219][ T9205] netlink: 'syz.5.1310': attribute type 7 has an invalid length. [ 365.088695][ T9204] vhci_hcd: invalid port number 129 [ 365.094161][ T9204] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 365.414098][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1301'. [ 366.039286][ T7998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.080809][ T9215] 9pnet_fd: Insufficient options for proto=fd [ 366.107405][ T9215] 9pnet_fd: Insufficient options for proto=fd [ 366.828390][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 368.120650][ T5464] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 368.271719][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1329'. [ 368.666528][ T9264] vhci_hcd: invalid port number 129 [ 368.672232][ T9264] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 368.770943][ T5464] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 369.001424][ T5464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 369.015405][ T5464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 369.026359][ T5464] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.042317][ T5464] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.102300][ T5464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.168299][ T5464] usb 6-1: config 0 descriptor?? [ 369.272590][ T9271] 9pnet_fd: Insufficient options for proto=fd [ 369.325278][ T9273] 9pnet_fd: Insufficient options for proto=fd [ 369.609700][ T5464] usbhid 6-1:0.0: can't add hid device: -71 [ 369.619949][ T5464] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 369.645356][ T5464] usb 6-1: USB disconnect, device number 9 [ 369.748421][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 371.226274][ T9304] vhci_hcd: invalid port number 129 [ 371.231562][ T9304] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 371.298280][ T9307] 9pnet_fd: Insufficient options for proto=fd [ 371.344147][ T9307] 9pnet_fd: Insufficient options for proto=fd [ 372.424146][ T5464] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 372.882927][ T5464] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.898339][ T5464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 372.909752][ T5464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 372.923873][ T5464] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.945902][ T5464] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.959911][ T9345] loop3: detected capacity change from 0 to 256 [ 372.965966][ T5464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.978879][ T9345] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 372.993223][ T5464] usb 2-1: config 0 descriptor?? [ 373.394707][ T9348] vhci_hcd: invalid port number 129 [ 373.402026][ T9348] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 373.568999][ T5464] usbhid 2-1:0.0: can't add hid device: -71 [ 373.616882][ T5464] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 373.668814][ T5464] usb 2-1: USB disconnect, device number 8 [ 373.752339][ T5436] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 374.083471][ T5436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.151051][ T5436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.237069][ T5436] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 374.268872][ T5436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.364880][ T5436] usb 1-1: config 0 descriptor?? [ 374.902698][ T9379] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 375.654442][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'. [ 375.724228][ T9382] loop4: detected capacity change from 0 to 512 [ 375.748060][ T9382] EXT4-fs: test_dummy_encryption requires encrypt feature [ 376.108052][ T5436] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 376.156051][ T5436] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 376.184503][ T5436] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 376.204240][ T5436] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 376.216608][ T5436] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 376.239287][ T5436] usb 1-1: USB disconnect, device number 10 [ 376.855061][ T9399] vhci_hcd: invalid port number 129 [ 376.860399][ T9399] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 377.364333][ T9416] loop5: detected capacity change from 0 to 164 [ 377.424794][ T5436] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 377.560846][ T9419] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 377.712729][ T5436] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.057993][ T5436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 378.133706][ T5436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 378.165996][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.245901][ T5436] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.367763][ T5436] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.403906][ T5436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.456792][ T5436] usb 5-1: config 0 descriptor?? [ 378.511106][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 378.556572][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1400'. [ 378.885016][ T5436] usbhid 5-1:0.0: can't add hid device: -71 [ 378.939667][ T5436] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 379.035805][ T5436] usb 5-1: USB disconnect, device number 14 [ 379.160355][ T5466] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 379.356863][ T5466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.383900][ T5466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.414359][ T5466] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 379.464368][ T5466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.475984][ T5466] usb 6-1: config 0 descriptor?? [ 379.728498][ T9455] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 379.746059][ T9454] IPVS: stopping backup sync thread 9455 ... [ 380.220109][ T9462] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 380.959813][ T9460] loop4: detected capacity change from 0 to 164 [ 381.152283][ T5466] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 381.175875][ T5466] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 381.416531][ T5466] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 381.433888][ T5466] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 381.434020][ T5466] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 381.451226][ T5466] usb 6-1: USB disconnect, device number 10 [ 381.470371][ T9469] vhci_hcd: invalid port number 129 [ 381.475661][ T9469] vhci_hcd: default hub control req: 0200 v0000 i0081 l0 [ 381.659670][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1419'. [ 382.875810][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1427'. [ 383.299022][ T9504] ------------[ cut here ]------------ [ 383.304634][ T9504] Please remove unsupported % in format string [ 383.312318][ T9504] WARNING: CPU: 0 PID: 9504 at lib/vsprintf.c:2680 format_decode+0x1193/0x1bb0 [ 383.321364][ T9504] Modules linked in: [ 383.325283][ T9504] CPU: 0 UID: 0 PID: 9504 Comm: syz.1.1430 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 383.336031][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 383.346164][ T9504] RIP: 0010:format_decode+0x1193/0x1bb0 [ 383.351862][ T9504] Code: a6 e0 f5 c6 05 50 72 4f 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 60 6e 34 8d e8 5e ca a2 f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 383.371561][ T9504] RSP: 0018:ffffc9000355f5c0 EFLAGS: 00010246 [ 383.377658][ T9504] RAX: f6edd3944c160e00 RBX: 0000000000000000 RCX: 0000000000040000 [ 383.385746][ T9504] RDX: ffffc9000f20e000 RSI: 0000000000005bdb RDI: 0000000000005bdc [ 383.394240][ T9504] RBP: ffffc9000355f6b0 R08: ffffffff8155b372 R09: fffffbfff1cfa0e0 [ 383.402307][ T9504] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: 1ffff920006abf1d [ 383.410355][ T9504] R13: ffffc9000355f8ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 383.418362][ T9504] FS: 00007f90ffc156c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 383.427392][ T9504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.434046][ T9504] CR2: 0000000020041000 CR3: 0000000031520000 CR4: 0000000000350ef0 [ 383.442092][ T9504] Call Trace: [ 383.445391][ T9504] [ 383.448344][ T9504] ? __warn+0x163/0x4e0 [ 383.452576][ T9504] ? format_decode+0x1193/0x1bb0 [ 383.457644][ T9504] ? report_bug+0x2b3/0x500 [ 383.462234][ T9504] ? format_decode+0x1193/0x1bb0 [ 383.467212][ T9504] ? handle_bug+0x3e/0x70 [ 383.471625][ T9504] ? exc_invalid_op+0x1a/0x50 [ 383.476332][ T9504] ? asm_exc_invalid_op+0x1a/0x20 [ 383.481445][ T9504] ? __warn_printk+0x292/0x360 [ 383.486240][ T9504] ? format_decode+0x1193/0x1bb0 [ 383.488556][ T9499] syzkaller0: entered promiscuous mode [ 383.491252][ T9504] ? __pfx_format_decode+0x10/0x10 [ 383.491313][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.491358][ T9504] ? bstr_printf+0x721/0x1210 [ 383.491402][ T9504] bstr_printf+0x137/0x1210 [ 383.491444][ T9504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.491493][ T9504] ? __pfx_bstr_printf+0x10/0x10 [ 383.528185][ T9504] ? timekeeping_get_ns+0x5c/0x420 [ 383.533379][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.538743][ T9499] syzkaller0: entered allmulticast mode [ 383.539027][ T9504] ? lockdep_hardirqs_on+0x99/0x150 [ 383.539060][ T9504] ? bpf_trace_printk+0x115/0x230 [ 383.554905][ T9504] bpf_trace_printk+0x1a1/0x230 [ 383.559796][ T9504] ? sched_clock+0x41/0x70 [ 383.564302][ T9504] ? __pfx_bpf_trace_printk+0x10/0x10 [ 383.569715][ T9504] ? sched_clock+0x41/0x70 [ 383.574218][ T9504] ? bpf_test_run+0x370/0xa90 [ 383.578968][ T9504] bpf_prog_12183cdb1cd51dab+0x36/0x3e [ 383.584509][ T9504] bpf_test_run+0x7ba/0xa90 [ 383.589056][ T9504] ? do_syscall_64+0xf3/0x230 [ 383.594256][ T9504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.600410][ T9504] ? bpf_test_run+0x370/0xa90 [ 383.605154][ T9504] ? __pfx_bpf_test_run+0x10/0x10 [ 383.610282][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.615954][ T9504] ? eth_type_trans+0x3d1/0x7a0 [ 383.620905][ T9504] ? __pfx_eth_type_trans+0x10/0x10 [ 383.626147][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.631866][ T9504] ? convert___skb_to_skb+0x41/0x620 [ 383.637198][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.642927][ T9504] bpf_prog_test_run_skb+0xc97/0x1820 [ 383.648374][ T9504] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 383.654298][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.659976][ T9504] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 383.665873][ T9504] bpf_prog_test_run+0x33c/0x3b0 [ 383.670906][ T9504] __sys_bpf+0x48d/0x810 [ 383.675190][ T9504] ? __pfx___sys_bpf+0x10/0x10 [ 383.680143][ T9504] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.686172][ T9504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.692592][ T9504] ? do_syscall_64+0x100/0x230 [ 383.697392][ T9504] __x64_sys_bpf+0x7c/0x90 [ 383.701885][ T9504] do_syscall_64+0xf3/0x230 [ 383.706423][ T9504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.712830][ T9504] RIP: 0033:0x7f90fed7def9 [ 383.717268][ T9504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.736961][ T9504] RSP: 002b:00007f90ffc15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 383.745875][ T9504] RAX: ffffffffffffffda RBX: 00007f90fef35f80 RCX: 00007f90fed7def9 [ 383.753923][ T9504] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 383.761950][ T9504] RBP: 00007f90fedf09f6 R08: 0000000000000000 R09: 0000000000000000 [ 383.769940][ T9504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.777987][ T9504] R13: 0000000000000000 R14: 00007f90fef35f80 R15: 00007fffa273efa8 [ 383.786039][ T9504] [ 383.789074][ T9504] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 383.796361][ T9504] CPU: 0 UID: 0 PID: 9504 Comm: syz.1.1430 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 383.807043][ T9504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 383.817095][ T9504] Call Trace: [ 383.820370][ T9504] [ 383.823298][ T9504] dump_stack_lvl+0x241/0x360 [ 383.828020][ T9504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.833250][ T9504] ? __pfx__printk+0x10/0x10 [ 383.837854][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.843511][ T9504] ? vscnprintf+0x5d/0x90 [ 383.847864][ T9504] panic+0x349/0x860 [ 383.851766][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.857423][ T9504] ? __warn+0x172/0x4e0 [ 383.861589][ T9504] ? __pfx_panic+0x10/0x10 [ 383.866028][ T9504] __warn+0x346/0x4e0 [ 383.870026][ T9504] ? format_decode+0x1193/0x1bb0 [ 383.874982][ T9504] report_bug+0x2b3/0x500 [ 383.879335][ T9504] ? format_decode+0x1193/0x1bb0 [ 383.884297][ T9504] handle_bug+0x3e/0x70 [ 383.888466][ T9504] exc_invalid_op+0x1a/0x50 [ 383.892984][ T9504] asm_exc_invalid_op+0x1a/0x20 [ 383.897850][ T9504] RIP: 0010:format_decode+0x1193/0x1bb0 [ 383.903414][ T9504] Code: a6 e0 f5 c6 05 50 72 4f 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 60 6e 34 8d e8 5e ca a2 f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 383.923044][ T9504] RSP: 0018:ffffc9000355f5c0 EFLAGS: 00010246 [ 383.929124][ T9504] RAX: f6edd3944c160e00 RBX: 0000000000000000 RCX: 0000000000040000 [ 383.937105][ T9504] RDX: ffffc9000f20e000 RSI: 0000000000005bdb RDI: 0000000000005bdc [ 383.945191][ T9504] RBP: ffffc9000355f6b0 R08: ffffffff8155b372 R09: fffffbfff1cfa0e0 [ 383.953200][ T9504] R10: dffffc0000000000 R11: fffffbfff1cfa0e0 R12: 1ffff920006abf1d [ 383.961186][ T9504] R13: ffffc9000355f8ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 383.969177][ T9504] ? __warn_printk+0x292/0x360 [ 383.973981][ T9504] ? __pfx_format_decode+0x10/0x10 [ 383.979107][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 383.984760][ T9504] ? bstr_printf+0x721/0x1210 [ 383.989455][ T9504] bstr_printf+0x137/0x1210 [ 383.993975][ T9504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.000326][ T9504] ? __pfx_bstr_printf+0x10/0x10 [ 384.005274][ T9504] ? timekeeping_get_ns+0x5c/0x420 [ 384.010402][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.016052][ T9504] ? lockdep_hardirqs_on+0x99/0x150 [ 384.021252][ T9504] ? bpf_trace_printk+0x115/0x230 [ 384.026301][ T9504] bpf_trace_printk+0x1a1/0x230 [ 384.031170][ T9504] ? sched_clock+0x41/0x70 [ 384.035596][ T9504] ? __pfx_bpf_trace_printk+0x10/0x10 [ 384.040985][ T9504] ? sched_clock+0x41/0x70 [ 384.045525][ T9504] ? bpf_test_run+0x370/0xa90 [ 384.050253][ T9504] bpf_prog_12183cdb1cd51dab+0x36/0x3e [ 384.055726][ T9504] bpf_test_run+0x7ba/0xa90 [ 384.060250][ T9504] ? do_syscall_64+0xf3/0x230 [ 384.064933][ T9504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.071017][ T9504] ? bpf_test_run+0x370/0xa90 [ 384.075732][ T9504] ? __pfx_bpf_test_run+0x10/0x10 [ 384.080785][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.086434][ T9504] ? eth_type_trans+0x3d1/0x7a0 [ 384.091312][ T9504] ? __pfx_eth_type_trans+0x10/0x10 [ 384.096528][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.102181][ T9504] ? convert___skb_to_skb+0x41/0x620 [ 384.107487][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.113145][ T9504] bpf_prog_test_run_skb+0xc97/0x1820 [ 384.118563][ T9504] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 384.124396][ T9504] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.130053][ T9504] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 384.135881][ T9504] bpf_prog_test_run+0x33c/0x3b0 [ 384.140838][ T9504] __sys_bpf+0x48d/0x810 [ 384.145108][ T9504] ? __pfx___sys_bpf+0x10/0x10 [ 384.149902][ T9504] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.155911][ T9504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.162266][ T9504] ? do_syscall_64+0x100/0x230 [ 384.167049][ T9504] __x64_sys_bpf+0x7c/0x90 [ 384.171477][ T9504] do_syscall_64+0xf3/0x230 [ 384.175993][ T9504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.181900][ T9504] RIP: 0033:0x7f90fed7def9 [ 384.186318][ T9504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.205935][ T9504] RSP: 002b:00007f90ffc15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.214372][ T9504] RAX: ffffffffffffffda RBX: 00007f90fef35f80 RCX: 00007f90fed7def9 [ 384.222353][ T9504] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 384.230333][ T9504] RBP: 00007f90fedf09f6 R08: 0000000000000000 R09: 0000000000000000 [ 384.238310][ T9504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.246291][ T9504] R13: 0000000000000000 R14: 00007f90fef35f80 R15: 00007fffa273efa8 [ 384.254288][ T9504] [ 384.257521][ T9504] Kernel Offset: disabled [ 384.261838][ T9504] Rebooting in 86400 seconds..