last executing test programs: 4m8.400460102s ago: executing program 2 (id=268): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setns(0xffffffffffffffff, 0x4000000) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) inotify_init1(0x0) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='wchan\x00') pread64(r4, &(0x7f0000000180)=""/252, 0xfc, 0x0) 4m5.746439719s ago: executing program 2 (id=277): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x2, 0x0, 0x512, 0x5, 0x1a, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000001100)=0x12) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) 4m2.24763847s ago: executing program 2 (id=282): bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x296) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x4, 0x4, 0xfffffff8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20}, {0x6}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1e, 0x4, 0x0, 0x8, 0x1060, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d80)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000007480)={0x0, 0x0, &(0x7f0000007440)={&(0x7f0000000300)={0xfffffffffffffd23, 0x0, 0x301}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="000000000000000038001280110001006272696467655f736c617665000000002000058006000200000000"], 0x58}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r9, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163e0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m1.636756159s ago: executing program 2 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000002000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) dup3(r3, r4, 0x0) 4m1.400331067s ago: executing program 2 (id=288): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x37, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r2, r0, 0x0) 4m0.030090476s ago: executing program 2 (id=291): open(&(0x7f0000000580)='./bus\x00', 0x1c1142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xce9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f00000005c0), 0x200005d8) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe80001d00000000"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3m44.289454278s ago: executing program 32 (id=291): open(&(0x7f0000000580)='./bus\x00', 0x1c1142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xce9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f00000005c0), 0x200005d8) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe80001d00000000"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m46.238064429s ago: executing program 6 (id=452): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0) 2m44.044802874s ago: executing program 6 (id=456): socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x6, @mcast1, 0xc9}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000029000000370000007c000000000000000a6a667e72d56e93a56d7a84a90408673c4576def63e3247ab3ef639ad46a74ffa11c8d9ff68c57a3ab9d8a51712ac453589e2279fdc380a965cb8a182ccef46486d239253cd6588788fd17dd6508dacc13f2287edbaac11e41faee97895fc8ad8e396b65f540acac11f62f76f959fc09a3c43c0a4969b6c19744fcd3be9fe78a53d12b64b67b59c6019642fdf0f1a75e794d59c80a1ca954004a42e7aa611ba009ad8752b612087633b632619cf72"], 0x18}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 2m40.75102301s ago: executing program 6 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0xaa382) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x5514, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) getrusage(0xfffffffffffffffe, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") 2m37.233240746s ago: executing program 6 (id=471): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/133], 0x210) 2m30.882070654s ago: executing program 6 (id=486): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 2m28.42305578s ago: executing program 6 (id=491): open(0x0, 0x1c1142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xce9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000005c0), 0x200005d8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe80001d0000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 2m13.282614542s ago: executing program 33 (id=491): open(0x0, 0x1c1142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xce9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_PROPBIT(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000005c0), 0x200005d8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe80001d0000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 22.23382435s ago: executing program 0 (id=727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) 21.436832217s ago: executing program 0 (id=728): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) rename(&(0x7f0000000e00)='./bus\x00', &(0x7f0000001080)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r1, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0x57) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x8ced4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x0, 0x0, 0x0) 17.222038562s ago: executing program 0 (id=740): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0xfffffdfd) ioctl$VT_RELDISP(r1, 0x5605) r2 = dup3(r0, r1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xff, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f00000008c0)=""/143, 0x8f}, {&(0x7f0000000200)=""/54, 0x36}, {&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000740)=""/196, 0xc4}], 0x6) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x96, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x0, 0xc0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '('}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x2, 0x33f, 0x6}, {0x6, 0x24, 0x1a, 0x8, 0x31}, [@country_functional={0x8, 0x24, 0x7, 0x2, 0x7f, [0xb82f]}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xae, 0xfc, 0x8, 0x9, 0x7}, @obex={0x5, 0x24, 0x15, 0x555}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x0, 0xf0, 0xa}, @dmm={0x7, 0x24, 0x14, 0x217, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x1, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x9, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x68, 0x7}}}}}}}]}}, &(0x7f0000001100)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x2, 0x6, 0x8, 0x10, 0x2}, 0x7d, &(0x7f0000000fc0)={0x5, 0xf, 0x7d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x9, 0x8}, @generic={0x6a, 0x10, 0x4, "b564629d748b2be5cbf2fa36bb0603a033bb47c8a515206cc60de005429fd0c25a957bdd7bbe72cbdeb78c8e6500567a40dd9294f5d845138b4d1a55512dde16204c944431cb93e0c643ce83af5b60634fbd19ed1a128f0ef8cb6eacac70c9e0478be3e06f3208"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x7f}]}, 0x5, [{0x12, &(0x7f0000000340)=@string={0x12, 0x3, "00035882055aa5156fe623eff358a334"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41d}}, {0x21, &(0x7f0000001180)=ANY=[@ANYBLOB="21eaed9314f6903986bbe75c57d3e3a821579b03b15702db9dde85b7468d18af0fb1d427e42bd518f524abdfbd1443fbf378ff48e66eca110b6983b112dba12e71a0ec471c922759a7dd3489db781735c00950a42bf2f3101a9a538c"]}, {0x62, &(0x7f0000001080)=@string={0x62, 0x3, "c1041b48b5c32c89e79dbdf13546daf13138123c71133b50a6247601060e42c4080bc8d81ce839aad3ff8f30f14f0e9dfad130067cb5a3e214ffed8a0bfe0edcc8ac9d2f1b122fd046349388fd21e78298e15fceedfa8b583c89781da95d1c35"}}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 13.286137447s ago: executing program 5 (id=745): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, 0x0, 0x30004016) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) 11.752385424s ago: executing program 1 (id=748): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = io_uring_setup(0x1693, &(0x7f0000000400)={0x0, 0x631d, 0x800, 0x3, 0x9e}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) 11.49467022s ago: executing program 7 (id=749): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) delete_module(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x200, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r6, 0x0) pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c8, 0x12) r8 = syz_open_procfs(0x0, &(0x7f0000000600)='net/igmp\x00') read$FUSE(r8, &(0x7f0000002140)={0x2020}, 0x2100) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) 11.38581704s ago: executing program 0 (id=751): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, 0x0, 0x503042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) 10.097048356s ago: executing program 0 (id=752): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) rename(&(0x7f0000000e00)='./bus\x00', &(0x7f0000001080)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x1, 0xfd85, {0x0}, {}, 0x4, 0xfffffffffffffffd}) prlimit64(r1, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240), 0x57) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x8ced4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x0, 0x0, 0x0) 10.063231464s ago: executing program 7 (id=754): mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000380)={0x100093, 0xf5, 0x20000}, 0x20) 9.880354844s ago: executing program 1 (id=756): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000240001"], 0x1c}}, 0x0) 9.879898334s ago: executing program 7 (id=757): r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 9.12723726s ago: executing program 4 (id=758): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 9.027761582s ago: executing program 5 (id=759): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(0x0, 0x19) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) chdir(0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x13, r3, 0x0) 7.251774763s ago: executing program 1 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0xc8, 0x8, 0x6, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0xaa382) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x5514, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) getrusage(0xfffffffffffffffe, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$eJzs3M9vFFUcAPDvTLel5YdFxB8gaBWMxB8tLT/kYGI0mnjQaKIHjKd1WwhSwEBNhBBFDxjjwZB4Nx5N/As86cWoJxOveDckxHABPa2ZnRnaLrulpQu7uJ9PMux7M7O89903b/fNe7sNoG+NZf8kEesj4mJEjEZEpfmEsfzh2pWztX+unK0lUa+/9XeSPS2uXjlbK/6LxpZZl++o14v8mhblnn83ojo7O3OyyE/MHftg4tTpM88eOVY9PHN45vjUgQN792wf2j+1ryNxZnFd3frxiW1bXn3nwuu1gxfe+/X7rL7ri+NlHJ00lr+6LT3R6cK6bMOCdFLpYkVYkazdBovtYozGQIxcPzYar3zW1coBt1ul1edz4Vwd+B/LBupAPyo/6LP733K7Q+OOnnD5xXzCI4v7WrHlRyqRFucMNt3fdtJwRBw89+832Ra3aR4CAGChH7PxzzOtxn9pPLDgvHuKNZSNEXFvRGyKiPsiYnNE3B/ROPfBiHhoheU3r5DcOP5JLy3K1gdWWMLSsvHf88Xa1uLxXzn6i40DRW5DI/7B5NCR2ZndxWuyKwbXZPnJRU9Z7KeX//iqed+XxTT72ILxX7Zl5S+OML3UPEE3XZ2rrj7y3OVPI7ZWWsWfXF8HTCJiS0RsvcUyjjz13bZ2x1rFX46Fb6oD60z1byOezNv/XDTFX0rark9OPrd/at/EcMzO7J4or4ob/fb7+Tfblb+q+Dsga/+1La//PP7sHjEZjjh1+szRxnrtqVso5M/Pa0mbQ5tvGv+N139tZ8RQ8nYjPVSeVTwOJa9lDyPl/o+qc3Mnp+afW+Ybj5N5/Lt2zMdfjfn+vym/PWu8Eg9HRHYRb4+IRyLi0aLtHouIxyNixxLh//LSzvfbHWvf/kvMyndQFv/0Eu2fveVlqfn2X3li4OjPP7Qrv76s9t/bSO0q9izn/W+5FVzNawcAAAB3i7TxHfgkHb+eTtPx8fw7/JtjbVqJiKcPnfjw+HT+XfmNMZiWM12jC+ZDJ4u54TI/1ZTfU8wbfz0w0siP107MTnc7eOhz69r0/8xfnV1qAXqR32tB/9L/oX/p/9C/9H/oXy90uwJAdwy13v3Jna4H0BUrH/8P35Z6AHee+3/oX/o/9C/9H/pS29/Gp6v6yf/dmqj0RjVaJkZ6oxplItKeqEbnEm98kXeJXqlPmags+49Z3GJiTctD3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iz/AgAA///NIdoS") 7.251310584s ago: executing program 5 (id=761): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 7.067711862s ago: executing program 7 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffffff], [], 'veth1_vlan\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'vlan0\x00', {0x3}}}}, {{@ipv6={@remote, @private0, [], [0x0, 0x0, 0x0, 0xffffffff], 'wg1\x00', 'syzkaller0\x00'}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x1, 0x3, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x10000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) uname(0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) brk(0x8000) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.852131794s ago: executing program 4 (id=763): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b3d090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3c310068090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 6.276135503s ago: executing program 5 (id=765): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 6.200036808s ago: executing program 5 (id=766): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 5.365233359s ago: executing program 1 (id=767): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(0x0) linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r4, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x2, 0x1, 0x0, r3, &(0x7f0000000180)='\x00', 0x1001}]) 5.252888594s ago: executing program 0 (id=768): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000002a80)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC], 0xff, 0x313, &(0x7f0000000580)="$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") ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 5.164645797s ago: executing program 3 (id=770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x4, 0x0, &(0x7f0000000080), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000100)="fdd4d4af46a33c29c6f6214cb8e6f4212c9b62e1d360070000008cfe51eb0e", 0x0, 0x1}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r5 = syz_open_pts(r4, 0x141601) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) fcntl$setstatus(r5, 0x4, 0x102800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f00000001c0)={0x2, 0x2, @local}, 0x10) r8 = accept(r6, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg$unix(r8, &(0x7f0000002800), 0x4000000000001e7, 0x40010000, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 4.765365642s ago: executing program 7 (id=771): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x1}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 4.088284963s ago: executing program 5 (id=772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010190401000000000000010902240b049db5"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 3.448901395s ago: executing program 34 (id=772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000010190401000000000000010902240b049db5"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0) 3.423637066s ago: executing program 3 (id=774): r0 = socket$packet(0x11, 0x3, 0x300) close_range(r0, 0xffffffffffffffff, 0x0) 3.422900756s ago: executing program 4 (id=775): r0 = io_uring_setup(0x4f8f, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 3.024200387s ago: executing program 4 (id=776): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) shutdown(r5, 0x2) 2.459769532s ago: executing program 3 (id=777): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) dup2(r1, r0) 1.763839382s ago: executing program 3 (id=778): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) 1.762735768s ago: executing program 4 (id=779): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimes(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000002c00)=ANY=[], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)) 1.72703009s ago: executing program 1 (id=780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_setup(0x2007, &(0x7f0000000200)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) 1.39213042s ago: executing program 3 (id=781): syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) 1.192314222s ago: executing program 1 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r4}, 0x50) read$FUSE(r3, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r6, 0x0, 0x2c) 1.033432353s ago: executing program 7 (id=783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) shutdown(r4, 0x2) 1.760839ms ago: executing program 3 (id=784): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 4 (id=785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000000)={0xb, 0xb7, 0x2, 0xbd05, 0x1a, "227fbc717c9cfc82"}) write(r4, &(0x7f00000002c0)='u', 0x1) r5 = syz_open_pts(r4, 0x2500) r6 = dup(r5) read$FUSE(r6, 0x0, 0x3f) kernel console output (not intermixed with test programs): dv: batadv0: Interface activated: batadv_slave_1 [ 96.374063][ T5843] veth1_macvtap: entered promiscuous mode [ 96.398865][ T5837] veth0_macvtap: entered promiscuous mode [ 96.438012][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.447823][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.457659][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.467411][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.493438][ T9] cfg80211: failed to load regulatory.db [ 96.523561][ T5839] veth0_vlan: entered promiscuous mode [ 96.540005][ T5841] veth0_macvtap: entered promiscuous mode [ 96.565306][ T5837] veth1_macvtap: entered promiscuous mode [ 96.585860][ T5841] veth1_macvtap: entered promiscuous mode [ 96.594486][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.605859][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.617784][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.629715][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.640426][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.653593][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.671189][ T5839] veth1_vlan: entered promiscuous mode [ 96.733751][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.746477][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.759094][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.770717][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.788008][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.798965][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.809542][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.820231][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.832446][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.877587][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.890811][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.906694][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.917345][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.928591][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.939345][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.952339][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.963418][ T5839] veth0_macvtap: entered promiscuous mode [ 96.984729][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.995423][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.006955][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.017582][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.028024][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.038694][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.051798][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.075135][ T5839] veth1_macvtap: entered promiscuous mode [ 97.098340][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.107289][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.116958][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.126900][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.140943][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.152796][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.169454][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.185948][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.196335][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.208512][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.218650][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.229420][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.244131][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.262982][ T5840] veth0_vlan: entered promiscuous mode [ 97.273137][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.283162][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.292295][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301263][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.336947][ T5840] veth1_vlan: entered promiscuous mode [ 97.369625][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.378195][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.382852][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.407479][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.418020][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.429120][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.439933][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.450877][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.462267][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.474153][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.516227][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.538674][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.558094][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.569088][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.591489][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.609073][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.628112][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.639051][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.662194][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.761272][ T55] Bluetooth: hci2: command tx timeout [ 97.765567][ T5840] veth0_macvtap: entered promiscuous mode [ 97.779891][ T5840] veth1_macvtap: entered promiscuous mode [ 97.797460][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.808569][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.818796][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.829340][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.839288][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.850811][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.860918][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.871461][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.881426][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.891988][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.903696][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.923263][ T55] Bluetooth: hci5: command tx timeout [ 97.923289][ T5147] Bluetooth: hci0: command tx timeout [ 97.928726][ T55] Bluetooth: hci3: command tx timeout [ 97.934832][ T5857] Bluetooth: hci1: command tx timeout [ 97.939717][ T55] Bluetooth: hci4: command tx timeout [ 97.971173][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.979031][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.009833][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.029520][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.048393][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.059617][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.081058][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.100032][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.110136][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.128743][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.140628][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.159834][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.173000][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.185211][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.188332][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.204202][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.213320][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.220916][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.229987][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.271688][ T5840] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.285411][ T5947] loop4: detected capacity change from 0 to 40427 [ 98.287698][ T5840] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.308870][ T5840] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.318078][ T5840] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.327704][ T5947] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 98.335100][ T5947] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 98.376126][ T5947] F2FS-fs (loop4): invalid crc value [ 98.383659][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.406728][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.411736][ T5947] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.440290][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.453174][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.591861][ T5947] F2FS-fs (loop4): Start checkpoint disabled! [ 98.616997][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.651900][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.656998][ T5947] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 98.681095][ T5947] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 98.702690][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.731141][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.765341][ T3490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.776859][ T3490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.898581][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.940675][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.976503][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.012094][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.106219][ T5964] loop2: detected capacity change from 0 to 256 [ 100.119990][ T5964] ======================================================= [ 100.119990][ T5964] WARNING: The mand mount option has been deprecated and [ 100.119990][ T5964] and is ignored by this kernel. Remove the mand [ 100.119990][ T5964] option from the mount to silence this warning. [ 100.119990][ T5964] ======================================================= [ 100.215463][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.272076][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.398984][ T5964] FAT-fs (loop2): Directory bread(block 64) failed [ 100.413928][ T5964] FAT-fs (loop2): Directory bread(block 65) failed [ 100.460814][ T5964] FAT-fs (loop2): Directory bread(block 66) failed [ 100.493800][ T5964] FAT-fs (loop2): Directory bread(block 67) failed [ 100.526820][ T5964] FAT-fs (loop2): Directory bread(block 68) failed [ 100.561077][ T5964] FAT-fs (loop2): Directory bread(block 69) failed [ 100.561794][ T5931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.568029][ T5964] FAT-fs (loop2): Directory bread(block 70) failed [ 100.633463][ T5964] FAT-fs (loop2): Directory bread(block 71) failed [ 100.653294][ T5964] FAT-fs (loop2): Directory bread(block 72) failed [ 100.715012][ T5964] FAT-fs (loop2): Directory bread(block 73) failed [ 100.975259][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.987500][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.997366][ T5931] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 101.006703][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.033592][ T5931] usb 4-1: config 0 descriptor?? [ 101.297975][ T5966] loop3: detected capacity change from 0 to 1024 [ 101.532997][ T5985] loop1: detected capacity change from 0 to 512 [ 101.559985][ T5985] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.590656][ T5985] EXT4-fs (loop1): can't mount with both data=journal and dax [ 101.653355][ T5966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.839609][ T5966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.840358][ T5931] hid (null): bogus close delimiter [ 103.089002][ T5931] usb 4-1: string descriptor 0 read error: -71 [ 103.095789][ T5931] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 103.105831][ T5931] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 103.114023][ T5931] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 103.168680][ T5931] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 103.178229][ T5931] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 103.240979][ T5976] syz.4.9 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.300326][ T5931] usb 4-1: USB disconnect, device number 2 [ 103.477562][ T5983] loop2: detected capacity change from 0 to 40427 [ 103.500347][ T5983] F2FS-fs (loop2): Invalid log blocks per segment (83886089) [ 103.528567][ T5983] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 103.593630][ T5983] F2FS-fs (loop2): invalid crc value [ 103.645394][ T5997] loop1: detected capacity change from 0 to 512 [ 103.660068][ T5983] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.905955][ T6006] serio: Serial port pts1 [ 103.989799][ T5997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.004372][ T3490] Bluetooth: hci6: Frame reassembly failed (-84) [ 104.011958][ T5997] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.062603][ T5982] loop5: detected capacity change from 0 to 40427 [ 104.076036][ T5983] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 104.080073][ T5982] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 104.094316][ T5982] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 104.114376][ T5983] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.137745][ T5982] F2FS-fs (loop5): invalid crc value [ 104.238244][ T5982] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-4) [ 104.341887][ T5983] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 105.436260][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.923571][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 106.824761][ T6035] Zero length message leads to an empty skb [ 107.132123][ T6033] sctp: failed to load transform for md5: -2 [ 107.203250][ T6031] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 107.694983][ T6042] loop5: detected capacity change from 0 to 1024 [ 107.752395][ T6046] netlink: 752 bytes leftover after parsing attributes in process `syz.2.22'. [ 108.027507][ T6051] netlink: 56 bytes leftover after parsing attributes in process `syz.1.27'. [ 108.934765][ T6042] EXT4-fs: inline encryption not supported [ 108.941090][ T6042] EXT4-fs: Ignoring removed orlov option [ 109.011587][ T6042] EXT4-fs (loop5): Test dummy encryption mode enabled [ 109.406113][ T6060] loop1: detected capacity change from 0 to 1024 [ 109.462149][ T6042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.512251][ T6060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.586190][ T6060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.706200][ T6060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e01c, mo2=0003] [ 109.743217][ T6060] System zones: 0-1, 3-36 [ 109.778646][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.795497][ T6042] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 109.946120][ T6078] loop4: detected capacity change from 0 to 256 [ 109.963066][ T5903] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.275467][ T6080] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.308777][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.254161][ T6087] loop0: detected capacity change from 0 to 512 [ 111.897478][ T6087] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 111.970087][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.009900][ T6087] block device autoloading is deprecated and will be removed. [ 112.018650][ T6087] EXT4-fs (loop0): external journal has bad superblock [ 112.019122][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.047783][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.083376][ T6078] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 112.106512][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 112.547625][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.538338][ T5903] usb 3-1: config 0 descriptor?? [ 113.566908][ T5903] usb 3-1: can't set config #0, error -71 [ 114.289700][ T6097] sctp: failed to load transform for md5: -2 [ 114.560982][ T5903] usb 3-1: USB disconnect, device number 2 [ 118.551045][ T6132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.44'. [ 118.671449][ T5844] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.080753][ T5844] usb 3-1: Using ep0 maxpacket: 8 [ 119.094475][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.128285][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.225309][ T5844] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 119.259161][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.305886][ T5844] usb 3-1: config 0 descriptor?? [ 119.793398][ T5844] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 120.789038][ T5844] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 120.796747][ T5844] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 120.805199][ T5844] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 120.812903][ T5844] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 120.820345][ T5844] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 120.827995][ T5844] playstation 0003:054C:0CE6.0002: unknown main item tag 0x0 [ 120.937139][ T5844] playstation 0003:054C:0CE6.0002: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.2-1/input0 [ 121.069966][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 121.195137][ T5844] playstation 0003:054C:0CE6.0002: Failed to retrieve feature with reportID 9: -71 [ 121.235530][ T5844] playstation 0003:054C:0CE6.0002: Failed to retrieve DualSense pairing info: -71 [ 121.251372][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 121.276092][ T5844] playstation 0003:054C:0CE6.0002: Failed to get MAC address from DualSense [ 121.286728][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.319683][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.330171][ T5844] playstation 0003:054C:0CE6.0002: Failed to create dualsense. [ 121.362157][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.376528][ T5844] playstation 0003:054C:0CE6.0002: probe with driver playstation failed with error -71 [ 121.430788][ T5906] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 121.439920][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.460684][ T5844] usb 3-1: USB disconnect, device number 3 [ 121.512880][ T5906] usb 6-1: config 0 descriptor?? [ 121.784748][ T6161] loop2: detected capacity change from 0 to 256 [ 121.829464][ T6161] FAT-fs (loop2): bogus number of FAT sectors [ 121.864609][ T6161] FAT-fs (loop2): Can't find a valid FAT filesystem [ 121.954863][ T5906] koneplus 0003:1E7D:2E22.0003: unknown main item tag 0x0 [ 121.984877][ T5906] koneplus 0003:1E7D:2E22.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 122.170649][ T5906] koneplus 0003:1E7D:2E22.0003: couldn't init struct koneplus_device [ 122.181043][ T5906] koneplus 0003:1E7D:2E22.0003: couldn't install mouse [ 122.212548][ T5906] koneplus 0003:1E7D:2E22.0003: probe with driver koneplus failed with error -32 [ 122.296510][ T5906] usb 6-1: USB disconnect, device number 2 [ 123.123423][ T6167] sctp: failed to load transform for md5: -2 [ 123.577781][ T6176] loop1: detected capacity change from 0 to 512 [ 123.685086][ T6176] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.850386][ T6176] EXT4-fs (loop1): 1 truncate cleaned up [ 123.887552][ T6176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.940750][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.106644][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.117884][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.130456][ T5844] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 125.139286][ T6183] syzkaller0: entered promiscuous mode [ 125.285281][ T29] audit: type=1326 audit(1730651287.746:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.57" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33717e719 code=0x0 [ 125.387599][ T6183] syzkaller0: entered allmulticast mode [ 125.817497][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.830339][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.834504][ T5844] usb 3-1: config 0 descriptor?? [ 125.904989][ T6196] netlink: 56 bytes leftover after parsing attributes in process `syz.3.62'. [ 126.754636][ T6204] loop4: detected capacity change from 0 to 512 [ 126.845495][ T6204] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.871608][ T5844] hid (null): bogus close delimiter [ 127.052625][ T6204] EXT4-fs (loop4): 1 truncate cleaned up [ 127.060029][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.087195][ T5844] usb 3-1: string descriptor 0 read error: -22 [ 128.041424][ T6215] loop5: detected capacity change from 0 to 16 [ 128.048482][ T6215] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ„$)°ógÚæH —…o뿲uwÿ¯Í(„[ãè_É7Nè`d–¢´rȬƒÙlG!Š‘§Ü•æ;ïºÜAŠ' [ 128.189578][ T6221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.235045][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.358757][ T5844] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 128.378699][ T5844] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 128.403959][ T5844] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 128.438690][ T5844] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 128.493054][ T5844] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 129.337709][ T5844] usb 3-1: USB disconnect, device number 4 [ 130.137171][ T6238] sctp: failed to load transform for md5: -2 [ 134.318361][ T6279] loop0: detected capacity change from 0 to 512 [ 134.358968][ T6281] loop5: detected capacity change from 0 to 512 [ 134.382036][ T6281] ext3: Unknown parameter 'uid<00000000000000000000' [ 134.459387][ T6279] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 134.569424][ T6281] cgroup: Unknown subsys name 'cpuset' [ 134.612724][ T6279] EXT4-fs (loop0): 1 truncate cleaned up [ 134.629730][ T6279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.664600][ T6285] loop3: detected capacity change from 0 to 512 [ 134.736647][ T6285] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.136643][ T6285] EXT4-fs (loop3): 1 truncate cleaned up [ 135.273275][ T6292] sctp: failed to load transform for md5: -2 [ 135.309911][ T6285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.514776][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 135.829544][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.914127][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.926537][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.949633][ T25] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 135.959916][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.030074][ T29] audit: type=1326 audit(1730651298.586:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.3.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a417e719 code=0x0 [ 136.322202][ T25] usb 5-1: config 0 descriptor?? [ 137.691429][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.698168][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.721015][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.024240][ T25] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 138.442797][ T25] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 138.611683][ T25] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 138.820689][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.920751][ T25] usb 5-1: USB disconnect, device number 2 [ 138.977213][ T25] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 138.983478][ T5904] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.999467][ T5904] usb 1-1: config 0 has no interfaces? [ 139.047963][ T5904] usb 1-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 139.591843][ T6336] overlayfs: failed to resolve './file0': -2 [ 139.646819][ T6337] loop3: detected capacity change from 0 to 512 [ 139.703183][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 139.712015][ T5904] usb 1-1: Product: syz [ 139.716221][ T5904] usb 1-1: SerialNumber: syz [ 139.731238][ T6337] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 139.885314][ T5904] usb 1-1: config 0 descriptor?? [ 140.120024][ T6342] loop4: detected capacity change from 0 to 2048 [ 140.357732][ T6341] loop5: detected capacity change from 0 to 512 [ 140.922822][ T6342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.958424][ T6341] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 140.971016][ T6341] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.981549][ T6342] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.042479][ T6341] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 141.071084][ T6341] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.082194][ T6341] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 142.414947][ T6341] EXT4-fs error (device loop5): ext4_orphan_get:1388: inode #16: comm syz.5.100: casefold flag without casefold feature [ 142.494191][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.567667][ T6341] EXT4-fs error (device loop5): ext4_orphan_get:1391: comm syz.5.100: couldn't read orphan inode 16 (err -117) [ 142.599595][ T5903] usb 1-1: USB disconnect, device number 2 [ 142.774009][ T6341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.030804][ T5903] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.374453][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.809202][ T6369] sctp: failed to load transform for md5: -2 [ 144.163211][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.360759][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.370853][ T5903] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 144.380050][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.408753][ T5903] usb 1-1: config 0 descriptor?? [ 145.122113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.131116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.140572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.150268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.153964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 145.160962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 145.177614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.186577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 145.256904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 145.262163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 145.888071][ T5903] logitech-hidpp-device 0003:046D:C086.0007: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 146.098941][ T5906] usb 1-1: USB disconnect, device number 3 [ 146.410890][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.111'. [ 146.419935][ T6397] netlink: 28 bytes leftover after parsing attributes in process `syz.4.111'. [ 146.457423][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 148.851173][ T6417] loop5: detected capacity change from 0 to 256 [ 151.240130][ T6433] loop5: detected capacity change from 0 to 512 [ 151.758423][ T6436] sctp: failed to load transform for md5: -2 [ 152.177468][ T6433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.200742][ T6433] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.426760][ T6456] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 153.436068][ T6456] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 154.433509][ T6444] snd_dummy snd_dummy.0: control 0:65279:0:syz0:0 is already present [ 154.542178][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.928888][ T6462] syz.4.136[6462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.929510][ T6462] syz.4.136[6462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.941922][ T6462] syz.4.136[6462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.986782][ T6462] capability: warning: `syz.4.136' uses 32-bit capabilities (legacy support in use) [ 156.962950][ T5147] Bluetooth: hci6: command 0x1003 tx timeout [ 157.197242][ T55] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 160.234650][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 160.472214][ T6493] loop0: detected capacity change from 0 to 512 [ 160.589060][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.687834][ T6493] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.719509][ T6498] loop2: detected capacity change from 0 to 512 [ 160.772532][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.891407][ T6498] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.229572][ T6510] sctp: failed to load transform for md5: -2 [ 162.802839][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.045516][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.070098][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.233137][ T6524] binder: BINDER_SET_CONTEXT_MGR already set [ 163.239374][ T6524] binder: 6523:6524 ioctl 4018620d 20000140 returned -16 [ 163.356078][ T6529] loop0: detected capacity change from 0 to 512 [ 163.428795][ T6529] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 163.489248][ T6529] EXT4-fs (loop0): 1 truncate cleaned up [ 163.534694][ T6529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.407000][ T29] audit: type=1326 audit(1730651326.606:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6527 comm="syz.0.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48e77e719 code=0x0 [ 164.460899][ T6531] snd_dummy snd_dummy.0: control 0:65279:0:syz0:0 is already present [ 164.981769][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.060835][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 165.249195][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 165.280774][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.311699][ T6553] loop0: detected capacity change from 0 to 1024 [ 165.319789][ T5905] usb 2-1: config 0 has no interfaces? [ 165.343815][ T5905] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.354233][ T6553] EXT4-fs: Ignoring removed orlov option [ 165.368543][ T6553] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.381461][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.418235][ T5905] usb 2-1: config 0 descriptor?? [ 165.442548][ T6553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.655602][ T6556] loop4: detected capacity change from 0 to 16 [ 165.666968][ T6556] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.679389][ T6556] syz.4.143: attempt to access beyond end of device [ 165.679389][ T6556] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 165.692748][ T6556] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 165.712328][ T6556] syz.4.143: attempt to access beyond end of device [ 165.712328][ T6556] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 165.725723][ T6556] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 166.207791][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.248543][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.264881][ T5906] usb 2-1: USB disconnect, device number 2 [ 169.813401][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.863078][ T6568] loop5: detected capacity change from 0 to 1024 [ 169.875629][ T6568] EXT4-fs: Ignoring removed orlov option [ 169.881526][ T6568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.980012][ T6568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.992763][ T5905] usb 3-1: Using ep0 maxpacket: 32 [ 170.007116][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 170.039936][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 170.292562][ T5905] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.305250][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.322231][ T5905] usb 3-1: config 0 descriptor?? [ 170.358501][ T6564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.625320][ T6577] hub 6-0:1.0: USB hub found [ 170.632932][ T6577] hub 6-0:1.0: 1 port detected [ 171.278115][ T5905] hub 3-1:0.0: USB hub found [ 171.299151][ T5905] hub 3-1:0.0: 2 ports detected [ 172.318919][ T6582] sctp: failed to load transform for md5: -2 [ 174.012852][ T6595] loop4: detected capacity change from 0 to 512 [ 174.023263][ T6595] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.081673][ T25] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 174.092551][ T25] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 174.101134][ T6595] EXT4-fs (loop4): 1 truncate cleaned up [ 174.125233][ T6595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.920845][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.081726][ T25] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 175.098172][ T25] usb 3-1: device reset changed ep0 maxpacket size! [ 175.113621][ T5903] usb 3-1: USB disconnect, device number 5 [ 175.124548][ T25] hub 3-1:0.0: set hub depth failed [ 175.150012][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.173882][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.317531][ T6604] loop3: detected capacity change from 0 to 512 [ 175.432341][ T6604] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.442460][ T5903] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 175.608343][ T6604] EXT4-fs (loop3): 1 truncate cleaned up [ 175.623212][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.634744][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.660964][ T6604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.709083][ T5903] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 175.983449][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.247673][ T29] audit: type=1326 audit(1730651338.656:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.3.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a417e719 code=0x0 [ 176.657415][ T6612] loop4: detected capacity change from 0 to 512 [ 176.743259][ T6612] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.752760][ T5903] usb 3-1: config 0 descriptor?? [ 176.786424][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.880824][ T6615] snd_dummy snd_dummy.0: control 0:65279:0:syz0:0 is already present [ 176.910911][ T6612] EXT4-fs (loop4): 1 orphan inode deleted [ 176.916679][ T6612] EXT4-fs (loop4): 1 truncate cleaned up [ 176.923646][ T6612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.940356][ T6612] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.209772][ T6612] loop4: detected capacity change from 0 to 256 [ 177.251556][ T5903] magicmouse 0003:05AC:0269.0008: item fetching failed at offset 6/7 [ 177.264769][ T5903] magicmouse 0003:05AC:0269.0008: magicmouse hid parse failed [ 177.306094][ T6612] vfat: Bad value for 'fmask' [ 177.308339][ T5903] magicmouse 0003:05AC:0269.0008: probe with driver magicmouse failed with error -22 [ 179.852967][ T5844] usb 3-1: USB disconnect, device number 6 [ 181.951932][ T6637] sctp: failed to load transform for md5: -2 [ 182.621040][ T5903] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.735492][ T6652] loop5: detected capacity change from 0 to 1024 [ 182.793821][ T6652] EXT4-fs: Ignoring removed orlov option [ 182.815417][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 182.860637][ T5903] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 182.870087][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.900764][ T6652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 182.910799][ T5903] usb 5-1: Product: syz [ 182.915021][ T5903] usb 5-1: Manufacturer: syz [ 182.952271][ T5903] usb 5-1: SerialNumber: syz [ 183.121480][ T6658] veth1_macvtap: left promiscuous mode [ 183.127211][ T6658] macsec0: entered promiscuous mode [ 183.240141][ T5903] usb 5-1: config 0 descriptor?? [ 183.391459][ T6652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.733669][ T6667] loop0: detected capacity change from 0 to 512 [ 183.806889][ T6667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.817430][ T5903] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.660449][ T5903] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 184.742723][ T5903] usb 5-1: USB disconnect, device number 4 [ 184.771587][ T6667] EXT4-fs (loop0): 1 truncate cleaned up [ 184.838970][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.856716][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.315614][ T6684] loop2: detected capacity change from 0 to 2048 [ 187.038768][ T6689] loop3: detected capacity change from 0 to 512 [ 187.052266][ T6689] EXT4-fs: Ignoring removed orlov option [ 187.108456][ T6689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.311676][ T6689] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 187.665355][ T5209] Alternate GPT is invalid, using primary GPT. [ 187.691980][ T5209] loop2: p1 p2 p3 [ 187.722081][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.734586][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.789481][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.214096][ T6699] sctp: failed to load transform for md5: -2 [ 188.600679][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 188.679004][ T6711] loop0: detected capacity change from 0 to 512 [ 188.752940][ T6713] loop3: detected capacity change from 0 to 512 [ 188.800380][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.820662][ T5903] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 188.831706][ T6713] ext3: Unknown parameter 'uid<00000000000000000000' [ 188.849569][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.866786][ T6713] cgroup: Unknown subsys name 'cpuset' [ 188.984123][ T5903] usb 5-1: config 0 descriptor?? [ 188.999861][ T5902] udevd[5902]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 189.126539][ T5988] udevd[5988]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 189.147750][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 189.891433][ T6711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.015522][ T6711] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.160700][ T5844] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 190.330632][ T5844] usb 2-1: Using ep0 maxpacket: 16 [ 190.351856][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.369173][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.441429][ T5844] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 190.471085][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.500973][ T5844] usb 2-1: config 0 descriptor?? [ 190.510727][ T5903] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 190.527583][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input5 [ 190.571903][ T6727] loop3: detected capacity change from 0 to 2048 [ 190.963746][ T6727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.031814][ T5903] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 191.046680][ T5903] usb 5-1: USB disconnect, device number 5 [ 191.134845][ T5844] usbhid 2-1:0.0: can't add hid device: -71 [ 191.157929][ T5844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.193869][ T5844] usb 2-1: USB disconnect, device number 3 [ 191.930148][ T6742] EXT4-fs error (device loop3): __ext4_iget:4952: inode #13: block 127754: comm syz.3.187: invalid block [ 192.132385][ T6744] netlink: 52 bytes leftover after parsing attributes in process `syz.3.187'. [ 192.532344][ T6743] EXT4-fs error (device loop3): __ext4_iget:4952: inode #13: block 127754: comm syz.3.187: invalid block [ 192.632944][ T6746] loop4: detected capacity change from 0 to 512 [ 192.843935][ T6749] loop2: detected capacity change from 0 to 128 [ 193.597626][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.819430][ T6746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.900857][ T6746] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.930846][ T6663] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 194.267202][ T6757] loop5: detected capacity change from 0 to 512 [ 194.337281][ T5839] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.351096][ T6757] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.673315][ T6757] EXT4-fs (loop5): 1 truncate cleaned up [ 194.735471][ T6757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.162575][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.215174][ T6766] loop2: detected capacity change from 0 to 1024 [ 195.306512][ T6766] EXT4-fs: Ignoring removed orlov option [ 195.366704][ T6766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.462201][ T6766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.122595][ T6779] hub 6-0:1.0: USB hub found [ 197.130899][ T6779] hub 6-0:1.0: 1 port detected [ 197.580792][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.934655][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.505508][ T6788] sctp: failed to load transform for md5: -2 [ 198.882918][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.890211][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.723945][ T6814] loop5: detected capacity change from 0 to 256 [ 199.794639][ T6814] exfat: Invalid uid '0x00000000ffffffff' [ 201.184675][ T6820] loop2: detected capacity change from 0 to 512 [ 201.683609][ T6824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.203'. [ 201.764832][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 201.803297][ T6820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.941080][ T6820] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.952247][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 201.980770][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 202.064038][ T6835] loop5: detected capacity change from 0 to 512 [ 202.113313][ T6835] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.235661][ T6835] EXT4-fs (loop5): 1 truncate cleaned up [ 202.257538][ T6835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.326067][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 202.338187][ T5905] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.347578][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.370198][ T5905] usb 4-1: config 0 descriptor?? [ 204.103083][ T6849] hub 6-0:1.0: USB hub found [ 204.110187][ T6849] hub 6-0:1.0: 1 port detected [ 204.863732][ T6853] bridge0: port 3(erspan0) entered blocking state [ 204.870284][ T6853] bridge0: port 3(erspan0) entered disabled state [ 204.876989][ T6853] erspan0: entered allmulticast mode [ 204.883599][ T6853] erspan0: entered promiscuous mode [ 204.890436][ T6853] bridge0: port 3(erspan0) entered blocking state [ 204.897270][ T6853] bridge0: port 3(erspan0) entered forwarding state [ 204.930306][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.957502][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.968675][ T5905] usb 4-1: can't set config #0, error -71 [ 204.977583][ T5905] usb 4-1: USB disconnect, device number 3 [ 206.746184][ T6864] loop5: detected capacity change from 0 to 512 [ 206.831209][ T6864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 206.858247][ T6870] syz.4.219[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.858359][ T6870] syz.4.219[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.961845][ T6864] EXT4-fs (loop5): 1 truncate cleaned up [ 206.982992][ T6870] syz.4.219[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.021190][ T6864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.056252][ T6870] syz.4.219[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.056360][ T6870] syz.4.219[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.123600][ T6870] syz.4.219[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.319086][ T29] audit: type=1326 audit(1730651370.756:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.5.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc9fd7e719 code=0x0 [ 208.395159][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.709468][ T6893] loop4: detected capacity change from 0 to 512 [ 208.935677][ T6893] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.252123][ T6893] EXT4-fs (loop4): 1 truncate cleaned up [ 209.260165][ T6893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.482017][ T6898] loop2: detected capacity change from 0 to 40427 [ 209.583602][ T6898] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 209.590016][ T6898] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 210.010959][ T29] audit: type=1326 audit(1730651372.266:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6892 comm="syz.4.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f477437e719 code=0x0 [ 210.071191][ T6898] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 210.464644][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.972242][ T6898] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 210.984993][ T6898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 212.021208][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 213.960807][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 214.200605][ T25] usb 6-1: device descriptor read/all, error -71 [ 214.388314][ T6939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.271260][ T6939] loop4: detected capacity change from 0 to 512 [ 216.279086][ T6939] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 216.288216][ T6939] EXT4-fs (loop4): external journal has bad superblock [ 216.415025][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 216.421629][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 216.432435][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 216.438476][ T5861] Bluetooth: hci5: command 0x0406 tx timeout [ 216.444657][ T5861] Bluetooth: hci0: command 0x0406 tx timeout [ 216.450893][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 216.514228][ T6963] loop2: detected capacity change from 0 to 1024 [ 216.523396][ T6963] EXT4-fs (loop2): unsupported inode size: 16384 [ 216.684126][ T6963] EXT4-fs (loop2): blocksize: 1024 [ 217.195044][ T6967] hub 6-0:1.0: USB hub found [ 217.211317][ T6967] hub 6-0:1.0: 1 port detected [ 217.770638][ T29] audit: type=1326 audit(1730651379.836:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6964 comm="syz.4.249" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f477437e719 code=0x0 [ 218.140692][ T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.415508][ T6977] loop2: detected capacity change from 0 to 8192 [ 218.583370][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 218.619731][ T47] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.627988][ T47] usb 2-1: config 0 has no interface number 0 [ 219.590618][ T47] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.611435][ T47] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.623807][ T47] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 219.633030][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.753593][ T47] usb 2-1: config 0 descriptor?? [ 219.770367][ T47] usb 2-1: can't set config #0, error -71 [ 219.811772][ T47] usb 2-1: USB disconnect, device number 4 [ 220.406812][ T6977] loop2: detected capacity change from 0 to 512 [ 221.502302][ T6977] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 221.534754][ T6977] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 221.551382][ T6977] EXT4-fs: failed to create workqueue [ 221.670489][ T6977] EXT4-fs (loop2): mount failed [ 224.876629][ T7025] loop5: detected capacity change from 0 to 512 [ 224.920775][ T7025] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 225.022001][ T7025] EXT4-fs (loop5): 1 truncate cleaned up [ 225.063514][ T7025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.495492][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.601072][ T7040] snd_dummy snd_dummy.0: control 0:65279:0:syz0:0 is already present [ 229.647393][ T7064] syz.0.276[7064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.647519][ T7064] syz.0.276[7064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.659144][ T7064] syz.0.276[7064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.179120][ T7071] loop5: detected capacity change from 0 to 1024 [ 231.197826][ T7071] EXT4-fs: Ignoring removed orlov option [ 231.265089][ T7072] loop4: detected capacity change from 0 to 256 [ 231.284071][ T7072] exfat: Deprecated parameter 'namecase' [ 231.366037][ T7071] EXT4-fs error (device loop5): ext4_quota_enable:7048: comm syz.5.279: Bad quota inum: 33554436, type: 1 [ 231.434627][ T7071] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=33554436). Please run e2fsck to fix. [ 231.521856][ T7071] EXT4-fs (loop5): mount failed [ 231.542388][ T7072] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 232.296963][ T7092] snd_dummy snd_dummy.0: control 0:65279:0:syz0:0 is already present [ 234.257715][ T7118] syz.1.293[7118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.258319][ T7118] syz.1.293[7118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.270446][ T7118] syz.1.293[7118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.124860][ T7122] input: syz0 as /devices/virtual/input/input7 [ 235.977356][ T7130] loop5: detected capacity change from 0 to 256 [ 237.350808][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.780664][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 237.793777][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.810568][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.120346][ T25] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 238.130569][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.104952][ T25] usb 5-1: config 0 descriptor?? [ 239.888417][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 239.950689][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 241.209895][ T25] usb 5-1: USB disconnect, device number 6 [ 242.522044][ T7166] loop5: detected capacity change from 0 to 512 [ 242.793392][ T7166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.808223][ T7166] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.148005][ T7173] syz.1.308[7173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.148952][ T7173] syz.1.308[7173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.163319][ T7173] syz.1.308[7173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.717724][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.024357][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 246.443034][ T7200] random: crng reseeded on system resumption [ 248.305336][ T7207] Illegal XDP return value 4294967294 on prog (id 146) dev N/A, expect packet loss! [ 251.141214][ T7226] syz.0.323[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.141783][ T7226] syz.0.323[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.153802][ T7226] syz.0.323[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.679637][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.710365][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.840722][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.899845][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.908117][ T5852] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 253.015021][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.250439][ T5852] Bluetooth: hci6: command tx timeout [ 255.474688][ T7237] chnl_net:caif_netlink_parms(): no params data found [ 256.710746][ T5849] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 257.002881][ T29] audit: type=1326 audit(1730651419.566:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7276 comm="syz.1.336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33717e719 code=0x0 [ 257.070868][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 257.202152][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.218855][ T5849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 257.263664][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.280710][ T5852] Bluetooth: hci6: command tx timeout [ 257.297756][ T5849] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 257.314578][ T7237] bridge_slave_0: entered allmulticast mode [ 257.340967][ T5849] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 257.352313][ T7237] bridge_slave_0: entered promiscuous mode [ 257.372954][ T5849] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 257.489977][ T5849] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 257.546396][ T5849] usb 4-1: config 1 interface 0 has no altsetting 0 [ 257.594842][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.604982][ T5849] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 257.640704][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.651771][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.678070][ T7237] bridge_slave_1: entered allmulticast mode [ 257.731447][ T7237] bridge_slave_1: entered promiscuous mode [ 257.909664][ T5849] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 258.481759][ T5849] scsi host1: usb-storage 4-1:1.0 [ 258.604334][ T7293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.166935][ T6148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.238610][ T7306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.341'. [ 259.371692][ T5852] Bluetooth: hci6: command tx timeout [ 259.625789][ T11] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 259.723216][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.228178][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.281956][ T11] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 260.341347][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.347742][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.970452][ T6148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.161516][ T7237] team0: Port device team_slave_0 added [ 261.425247][ T6148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.440960][ T5852] Bluetooth: hci6: command tx timeout [ 261.532861][ T7237] team0: Port device team_slave_1 added [ 261.583151][ T7318] loop4: detected capacity change from 0 to 256 [ 261.729357][ T6148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.775709][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.783604][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.837071][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.880638][ T7318] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 261.949639][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.985951][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.084421][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.287307][ T5931] usb 4-1: USB disconnect, device number 4 [ 263.421783][ T3490] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 263.464173][ T3490] sd 1:0:0:0: [sdb] Sense not available. [ 263.470388][ T3490] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 263.586628][ T7237] hsr_slave_0: entered promiscuous mode [ 263.597546][ T3490] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 263.635485][ T3490] sd 1:0:0:0: [sdb] Write Protect is off [ 263.664152][ T7237] hsr_slave_1: entered promiscuous mode [ 263.696159][ T3490] sd 1:0:0:0: [sdb] Asking for cache data failed [ 263.731009][ T7237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.760436][ T3490] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 263.802146][ T7237] Cannot create hsr debugfs directory [ 263.962761][ T29] audit: type=1326 audit(1730651426.406:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7331 comm="syz.0.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48e77e719 code=0x0 [ 263.997447][ T3490] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 264.423553][ T7347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.354'. [ 265.610668][ T5904] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 265.654228][ T5902] udevd[5902]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 266.605943][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.606027][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.606089][ T5904] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 266.606140][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.671910][ T5904] usb 2-1: config 0 descriptor?? [ 266.681261][ T7362] tty tty28: ldisc open failed (-12), clearing slot 27 [ 266.736296][ T6148] bridge_slave_1: left allmulticast mode [ 266.770427][ T6148] bridge_slave_1: left promiscuous mode [ 266.787089][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.846052][ T6148] bridge_slave_0: left allmulticast mode [ 266.856375][ T5962] udevd[5962]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 266.869401][ T6148] bridge_slave_0: left promiscuous mode [ 266.885783][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.842337][ T5904] usbhid 2-1:0.0: can't add hid device: -71 [ 267.848417][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 267.858505][ T5904] usb 2-1: USB disconnect, device number 5 [ 269.749332][ T29] audit: type=1326 audit(1730651432.306:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.1.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33717e719 code=0x0 [ 270.457532][ T7402] loop5: detected capacity change from 0 to 256 [ 270.549795][ T7402] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.587596][ T7402] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 270.643896][ T6148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.690488][ T6148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.716785][ T6148] bond0 (unregistering): Released all slaves [ 270.794851][ T7361] bridge0: port 3(erspan0) entered blocking state [ 270.803032][ T7361] bridge0: port 3(erspan0) entered disabled state [ 270.809835][ T7361] erspan0: entered allmulticast mode [ 270.816517][ T7361] erspan0: entered promiscuous mode [ 270.822337][ T7361] bridge0: port 3(erspan0) entered blocking state [ 270.827344][ T7408] loop5: detected capacity change from 0 to 4096 [ 270.828892][ T7361] bridge0: port 3(erspan0) entered forwarding state [ 271.080868][ T7408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.721955][ T7415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.174847][ T7419] loop4: detected capacity change from 0 to 2048 [ 272.194405][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.306834][ T7419] Alternate GPT is invalid, using primary GPT. [ 272.313643][ T7419] loop4: p1 p2 p3 [ 272.881213][ T7237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 273.143516][ T7237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.198370][ T29] audit: type=1326 audit(1730651435.736:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a417e719 code=0x0 [ 273.393193][ T7438] loop4: detected capacity change from 0 to 512 [ 273.436109][ T5902] udevd[5902]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 273.437290][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 273.461395][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 273.481801][ T7438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.497416][ T6720] udevd[6720]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 273.521941][ T7438] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.554240][ T5902] udevd[5902]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 273.580153][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 273.605268][ T6720] udevd[6720]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 273.630674][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 273.641453][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.652218][ T5906] usb 2-1: config 0 has no interfaces? [ 273.657828][ T5906] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 273.710927][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.831992][ T5906] usb 2-1: config 0 descriptor?? [ 273.849961][ T5902] udevd[5902]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 273.864472][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 274.600202][ T7449] fuse: Bad value for 'fd' [ 274.822506][ T7237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.868675][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.894797][ T7237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.194687][ T6148] hsr_slave_0: left promiscuous mode [ 275.219358][ T6148] hsr_slave_1: left promiscuous mode [ 275.242836][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.294087][ T5931] usb 2-1: USB disconnect, device number 6 [ 275.331428][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.415629][ T6148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.440909][ T6148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.536210][ T6148] veth1_macvtap: left promiscuous mode [ 275.581871][ T6148] veth0_macvtap: left promiscuous mode [ 275.587540][ T6148] veth1_vlan: left promiscuous mode [ 275.620964][ T6148] veth0_vlan: left promiscuous mode [ 278.585211][ T7489] input: syz0 as /devices/virtual/input/input10 [ 278.831948][ T7494] loop4: detected capacity change from 0 to 16 [ 278.862523][ T7494] erofs: (device loop4): mounted with root inode @ nid 36. [ 279.030707][ T29] audit: type=1326 audit(1730651441.576:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33717e719 code=0x0 [ 279.286141][ T7500] syz.4.389: attempt to access beyond end of device [ 279.286141][ T7500] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 279.310976][ T7500] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 8200 of nid 36 [ 279.550988][ T5849] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 279.713055][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.730724][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.742338][ T6148] team0 (unregistering): Port device team_slave_1 removed [ 279.772085][ T5849] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 279.801565][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.830029][ T5849] usb 2-1: config 0 descriptor?? [ 279.915834][ T6148] team0 (unregistering): Port device team_slave_0 removed [ 280.087869][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.131888][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.414356][ T7508] loop4: detected capacity change from 0 to 2048 [ 280.450032][ T7508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 280.659548][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.269101][ T7511] netlink: 56 bytes leftover after parsing attributes in process `syz.4.396'. [ 282.580776][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.611620][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.393'. [ 282.628962][ T7502] vlan2: entered promiscuous mode [ 282.678158][ T7502] batadv0: entered promiscuous mode [ 282.684619][ T7502] vlan2: entered allmulticast mode [ 282.689885][ T7502] batadv0: entered allmulticast mode [ 282.718379][ T7502] batadv0: left allmulticast mode [ 282.723646][ T7502] batadv0: left promiscuous mode [ 282.816812][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.940147][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.947438][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.013879][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.021078][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.064861][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 283.118064][ T5849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 283.424374][ T5849] usb 2-1: USB disconnect, device number 7 [ 285.346526][ T7547] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 285.896975][ T7237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.002502][ T7571] fuse: Unknown parameter 'group_i00000000000000000000' [ 287.360760][ T5852] Bluetooth: hci0: command 0x0406 tx timeout [ 287.716156][ T7585] block device autoloading is deprecated and will be removed. [ 289.692181][ T7237] veth0_vlan: entered promiscuous mode [ 289.789232][ T7237] veth1_vlan: entered promiscuous mode [ 289.933733][ T7237] veth0_macvtap: entered promiscuous mode [ 289.950958][ T7237] veth1_macvtap: entered promiscuous mode [ 290.127303][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.230731][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.289416][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.300541][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.311252][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.321952][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.331949][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.342633][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.126451][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.267761][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.899991][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.919879][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.930557][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.940397][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.951029][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.960928][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.971478][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.981382][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.991907][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.002568][ T7237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.014069][ T7237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.025670][ T7237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.036579][ T7237] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.045448][ T7237] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.054303][ T7237] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.063109][ T7237] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.322217][ T7621] netem: invalid attributes len -24 [ 292.327495][ T7621] netem: change failed [ 293.755815][ T7638] loop4: detected capacity change from 0 to 512 [ 294.475070][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.484812][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.509810][ T7638] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.423: attempt to clear invalid blocks 1 len 1 [ 294.525768][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.551109][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.680090][ T7638] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.423: bg 0: block 343: padding at end of block bitmap is not set [ 294.829060][ T7638] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 294.842414][ T7638] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.423: invalid indirect mapped block 1819239214 (level 0) [ 294.979640][ T7638] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.423: invalid indirect mapped block 1819239214 (level 1) [ 295.046057][ T7638] EXT4-fs (loop4): 1 truncate cleaned up [ 295.101954][ T7638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.198278][ T7654] loop5: detected capacity change from 0 to 2048 [ 295.923271][ T7638] syz.4.423[7638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.923395][ T7638] syz.4.423[7638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.957566][ T7654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.055901][ T7638] syz.4.423[7638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.104510][ T7654] 9pnet_fd: Insufficient options for proto=fd [ 296.608869][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.741180][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.225854][ T7695] loop6: detected capacity change from 0 to 512 [ 300.847601][ T7695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.211517][ T7695] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.443409][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 303.612263][ T7237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.176615][ T7735] loop6: detected capacity change from 0 to 512 [ 304.225008][ T7735] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 304.359362][ T7735] EXT4-fs (loop6): 1 truncate cleaned up [ 304.376522][ T7735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.807709][ T29] audit: type=1326 audit(1730651467.616:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7733 comm="syz.6.443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb913f7e719 code=0x0 [ 306.337274][ T7237] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.723376][ T7763] overlayfs: failed to resolve './file0': -2 [ 311.302358][ T7811] netlink: 56 bytes leftover after parsing attributes in process `syz.6.456'. [ 312.191417][ T29] audit: type=1326 audit(1730651474.566:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7800 comm="syz.1.459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33717e719 code=0x0 [ 313.144597][ T7822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.330441][ T7830] loop4: detected capacity change from 0 to 512 [ 314.579201][ T7827] loop6: detected capacity change from 0 to 512 [ 314.592234][ T7830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.634171][ T7830] ext4 filesystem being mounted at /84/control supports timestamps until 2038-01-19 (0x7fffffff) [ 314.671217][ T7827] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 314.714382][ T7827] EXT4-fs (loop6): external journal has bad superblock [ 316.215148][ T7856] netlink: 'syz.5.470': attribute type 4 has an invalid length. [ 316.257654][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.641128][ T7879] netlink: 56 bytes leftover after parsing attributes in process `syz.0.475'. [ 318.623117][ T7861] netlink: 'syz.5.470': attribute type 4 has an invalid length. [ 322.027275][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.033741][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.256832][ T7919] pim6reg1: entered promiscuous mode [ 322.270626][ T7919] pim6reg1: entered allmulticast mode [ 323.230761][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 323.685887][ T7933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.080602][ T7937] loop4: detected capacity change from 0 to 512 [ 324.095736][ T7937] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 324.104825][ T7937] EXT4-fs (loop4): external journal has bad superblock [ 325.039471][ T7942] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.048278][ T7942] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.056723][ T7942] bridge0: entered allmulticast mode [ 325.644076][ T7955] input: syz0 as /devices/virtual/input/input14 [ 326.444640][ T7965] Invalid ELF header type: 0 != 1 [ 327.549807][ T7979] 9pnet_fd: Insufficient options for proto=fd [ 330.061144][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 330.210817][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 330.219345][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.282720][ T5906] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 330.360830][ T5906] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 330.461899][ T8008] mmap: syz.3.498 (8008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 330.533604][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 330.542876][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.560119][ T7992] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 330.579478][ T5906] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 330.780724][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 331.169358][ T5906] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 331.179014][ T5906] usb 2-1: USB disconnect, device number 8 [ 331.744527][ T8021] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 332.344958][ T8029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.695361][ T8029] loop5: detected capacity change from 0 to 512 [ 332.710231][ T8029] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 332.719388][ T8029] EXT4-fs (loop5): external journal has bad superblock [ 336.433239][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'. [ 336.443576][ T8077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'. [ 338.343762][ T8083] loop5: detected capacity change from 0 to 512 [ 338.357744][ T8083] EXT4-fs: Ignoring removed i_version option [ 338.465767][ T8083] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 338.581652][ T8083] EXT4-fs (loop5): 1 truncate cleaned up [ 338.595349][ T8083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.881148][ T8108] fuse: Bad value for 'fd' [ 339.886688][ T8109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 339.992319][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.906643][ T8127] loop5: detected capacity change from 0 to 512 [ 341.052218][ T8127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.260833][ T8127] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.573486][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 343.997687][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.009367][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.021466][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.029977][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.037781][ T5857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.045496][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.694964][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 344.957135][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 345.061666][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 345.096260][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.107718][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.180277][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 345.216970][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.247529][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.303399][ T9] usb 5-1: config 0 descriptor?? [ 345.312199][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.320378][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.350310][ T8141] bridge_slave_0: entered allmulticast mode [ 345.443923][ T8141] bridge_slave_0: entered promiscuous mode [ 345.547366][ T5906] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 345.561581][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.570101][ T5906] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.584993][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.615463][ T8141] bridge_slave_1: entered allmulticast mode [ 345.636588][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.636843][ T8141] bridge_slave_1: entered promiscuous mode [ 345.644872][ T5906] usb 4-1: SerialNumber: syz [ 348.390749][ T5857] Bluetooth: hci5: command tx timeout [ 348.853825][ T8193] fuse: Bad value for 'fd' [ 349.488434][ T5906] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 350.804603][ T5857] Bluetooth: hci5: command tx timeout [ 351.398293][ T9] usb 5-1: string descriptor 0 read error: -71 [ 351.408685][ T9] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 351.417804][ T9] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 351.426101][ T9] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 351.434366][ T9] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 351.442253][ T9] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 351.454857][ T9] usb 5-1: USB disconnect, device number 7 [ 351.466509][ T8197] loop5: detected capacity change from 0 to 256 [ 351.552933][ T5906] usb 4-1: USB disconnect, device number 5 [ 351.884027][ T8197] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 351.954982][ T8197] syz.5.544: attempt to access beyond end of device [ 351.954982][ T8197] loop5: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 352.056691][ T8197] syz.5.544: attempt to access beyond end of device [ 352.056691][ T8197] loop5: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 352.281863][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.667650][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.001500][ T8197] syz.5.544: attempt to access beyond end of device [ 353.001500][ T8197] loop5: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 353.015792][ T5857] Bluetooth: hci5: command tx timeout [ 353.283234][ T8197] Buffer I/O error on dev loop5, logical block 524408, async page read [ 353.361567][ T8197] syz.5.544: attempt to access beyond end of device [ 353.361567][ T8197] loop5: rw=0, sector=524408, nr_sectors = 1 limit=256 [ 353.375726][ T8197] Buffer I/O error on dev loop5, logical block 524408, async page read [ 353.396944][ T29] audit: type=1800 audit(1730651515.956:16): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.544" name="file1" dev="loop5" ino=1048612 res=0 errno=0 [ 353.462497][ T8225] loop4: detected capacity change from 0 to 256 [ 353.473905][ T8141] team0: Port device team_slave_0 added [ 353.585156][ T8141] team0: Port device team_slave_1 added [ 353.592588][ T8225] exFAT-fs (loop4): Invalid exboot-signature(sector = 7): 0xaa00006c [ 353.673148][ T8225] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x2119ad3c) [ 353.800351][ T8225] exFAT-fs (loop4): invalid boot region [ 353.908305][ T8225] exFAT-fs (loop4): failed to recognize exfat type [ 355.123300][ T8241] fuse: Bad value for 'fd' [ 355.210889][ T5857] Bluetooth: hci5: command tx timeout [ 356.325666][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.350947][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.590749][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.642537][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.649559][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.860593][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.133488][ T8268] netlink: 76 bytes leftover after parsing attributes in process `syz.4.558'. [ 359.764732][ T8283] loop4: detected capacity change from 0 to 256 [ 359.910380][ T2895] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.247693][ T8289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.563'. [ 360.257735][ T8289] unsupported nlmsg_type 40 [ 360.889220][ T8141] hsr_slave_0: entered promiscuous mode [ 360.954901][ T8141] hsr_slave_1: entered promiscuous mode [ 361.011325][ T8141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.050356][ T8141] Cannot create hsr debugfs directory [ 362.368792][ T8306] loop5: detected capacity change from 0 to 2048 [ 362.405171][ T8300] fuse: Bad value for 'fd' [ 363.012234][ T2895] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.486762][ T8306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.908500][ T2895] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.955498][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 364.205373][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.019367][ T5857] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 366.148814][ T2895] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.266621][ T8340] IPv6: NLM_F_REPLACE set, but no existing node found! [ 368.269831][ T2895] bridge_slave_1: left allmulticast mode [ 368.293963][ T2895] bridge_slave_1: left promiscuous mode [ 368.310248][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.363937][ T2895] bridge_slave_0: left allmulticast mode [ 368.409728][ T2895] bridge_slave_0: left promiscuous mode [ 368.426084][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.542910][ T25] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 369.163852][ T8375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.203179][ T5903] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 369.241121][ T25] usb 6-1: device descriptor read/all, error -71 [ 369.406524][ T8379] fuse: Invalid rootmode [ 369.443723][ T5903] usb 5-1: device descriptor read/all, error -71 [ 369.734961][ T29] audit: type=1326 audit(1730651532.296:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.4.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f477437e719 code=0x0 [ 370.717438][ T8395] loop4: detected capacity change from 0 to 256 [ 372.222469][ T8397] random: crng reseeded on system resumption [ 372.837500][ T8395] FAT-fs (loop4): Directory bread(block 64) failed [ 372.844454][ T8395] FAT-fs (loop4): Directory bread(block 65) failed [ 372.851224][ T8395] FAT-fs (loop4): Directory bread(block 66) failed [ 372.857798][ T8395] FAT-fs (loop4): Directory bread(block 67) failed [ 372.864481][ T8395] FAT-fs (loop4): Directory bread(block 68) failed [ 372.871105][ T8395] FAT-fs (loop4): Directory bread(block 69) failed [ 372.877718][ T8395] FAT-fs (loop4): Directory bread(block 70) failed [ 372.884381][ T8395] FAT-fs (loop4): Directory bread(block 71) failed [ 372.892316][ T8395] FAT-fs (loop4): Directory bread(block 72) failed [ 372.898884][ T8395] FAT-fs (loop4): Directory bread(block 73) failed [ 374.356357][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.375736][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.399454][ T2895] bond0 (unregistering): Released all slaves [ 374.640645][ T5849] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 374.747870][ T8141] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 374.792847][ T5849] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 374.804981][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.829777][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.931555][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 374.945604][ T5849] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 374.955485][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.990907][ T5849] usb 5-1: config 0 descriptor?? [ 375.153638][ T8141] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 375.197037][ T8141] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 375.304445][ T8141] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 376.008327][ T8432] overlayfs: missing 'workdir' [ 376.514922][ T5849] nintendo 0003:057E:2009.000B: unknown main item tag 0x0 [ 376.528680][ T5849] nintendo 0003:057E:2009.000B: unknown main item tag 0x0 [ 376.539402][ T5849] nintendo 0003:057E:2009.000B: item fetching failed at offset 2/5 [ 376.556670][ T5849] nintendo 0003:057E:2009.000B: HID parse failed [ 376.712260][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.759201][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.826568][ T8141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.839217][ T8141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.062480][ T5849] nintendo 0003:057E:2009.000B: probe - fail = -22 [ 377.069160][ T5849] nintendo 0003:057E:2009.000B: probe with driver nintendo failed with error -22 [ 377.178320][ T5849] usb 5-1: USB disconnect, device number 10 [ 377.269382][ T8446] fuse: Invalid rootmode [ 379.394310][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.394412][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.396315][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.396393][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.399716][ T8459] loop4: detected capacity change from 0 to 1024 [ 379.402271][ T8459] EXT4-fs: Ignoring removed orlov option [ 379.402318][ T8459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 379.854619][ T8467] loop5: detected capacity change from 0 to 256 [ 380.582823][ T8459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.897627][ T2895] hsr_slave_0: left promiscuous mode [ 380.927226][ T2895] hsr_slave_1: left promiscuous mode [ 380.943458][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.951452][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.959541][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.967989][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.169880][ T2895] veth1_macvtap: left promiscuous mode [ 382.230747][ T2895] veth0_macvtap: left promiscuous mode [ 382.259871][ T2895] veth1_vlan: left promiscuous mode [ 382.265642][ T2895] veth0_vlan: left promiscuous mode [ 382.662996][ T29] audit: type=1326 audit(1730651545.226:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8491 comm="syz.0.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48e77e719 code=0x0 [ 383.462330][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.468767][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.991394][ T8506] fuse: Invalid rootmode [ 386.841121][ T8518] overlayfs: missing 'workdir' [ 387.701555][ T8519] tty tty21: ldisc open failed (-12), clearing slot 20 [ 388.065819][ T2895] team0 (unregistering): Port device team_slave_1 removed [ 388.361074][ T2895] team0 (unregistering): Port device team_slave_0 removed [ 392.326467][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.037977][ T8555] netlink: 76 bytes leftover after parsing attributes in process `syz.3.619'. [ 394.030410][ T8141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.576140][ T8579] xt_TCPMSS: Only works on TCP SYN packets [ 396.467429][ T8588] pim6reg1: entered promiscuous mode [ 396.508458][ T8588] pim6reg1: entered allmulticast mode [ 396.882178][ T8141] veth0_vlan: entered promiscuous mode [ 396.924314][ T8141] veth1_vlan: entered promiscuous mode [ 397.037810][ T8141] veth0_macvtap: entered promiscuous mode [ 397.109999][ T8141] veth1_macvtap: entered promiscuous mode [ 397.435550][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.590322][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.654946][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.180632][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.367734][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.385817][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.554173][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.600638][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.610479][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.680681][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.713668][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.832113][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.860636][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.870489][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.901517][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.920604][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.940783][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.960653][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.976316][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.996140][ T8141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.007436][ T8141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.020020][ T8141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.236417][ T8614] loop5: detected capacity change from 0 to 1024 [ 400.339665][ T8614] EXT4-fs: Ignoring removed orlov option [ 400.389943][ T8614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 400.428003][ T8141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.439105][ T8141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.471882][ T8614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.507552][ T8141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.938783][ T8141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.186559][ T5906] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 404.335092][ T8656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.381499][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 404.474748][ T29] audit: type=1326 audit(1730651566.966:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8661 comm="syz.0.633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48e77e719 code=0x0 [ 404.498199][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 404.540715][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 404.546803][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 404.565154][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.696995][ T5906] usb 5-1: config 0 has no interfaces? [ 404.710601][ T5906] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.719790][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.940539][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 404.949860][ T5857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 405.141729][ T5906] usb 5-1: config 0 descriptor?? [ 405.266274][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 405.331413][ T5840] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.958844][ T8675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 406.449829][ T2895] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.277283][ T5931] usb 5-1: USB disconnect, device number 11 [ 407.440809][ T5857] Bluetooth: hci5: command tx timeout [ 408.748713][ T2895] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.735330][ T5857] Bluetooth: hci5: command tx timeout [ 410.118769][ T8657] chnl_net:caif_netlink_parms(): no params data found [ 410.394730][ T2895] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.816690][ T2895] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.325887][ T8657] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.367108][ T8657] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.420945][ T8657] bridge_slave_0: entered allmulticast mode [ 411.480744][ T8657] bridge_slave_0: entered promiscuous mode [ 411.516914][ T8657] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.599947][ T8657] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.622104][ T8657] bridge_slave_1: entered allmulticast mode [ 411.668904][ T8657] bridge_slave_1: entered promiscuous mode [ 411.761323][ T5857] Bluetooth: hci5: command tx timeout [ 411.966991][ T8657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.183728][ T8657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.851938][ T2895] bridge_slave_1: left allmulticast mode [ 413.858740][ T2895] bridge_slave_1: left promiscuous mode [ 413.867095][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.900748][ T5857] Bluetooth: hci5: command tx timeout [ 413.948222][ T2895] bridge_slave_0: left allmulticast mode [ 413.965471][ T2895] bridge_slave_0: left promiscuous mode [ 413.995754][ T8751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.016097][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.189858][ T8775] random: crng reseeded on system resumption [ 418.678288][ T2895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.729134][ T2895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.167454][ T2895] bond0 (unregistering): Released all slaves [ 419.404791][ T8657] team0: Port device team_slave_0 added [ 419.422094][ T8657] team0: Port device team_slave_1 added [ 419.609887][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.647638][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.735783][ T8657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.195026][ T2895] hsr_slave_0: left promiscuous mode [ 420.281000][ T2895] hsr_slave_1: left promiscuous mode [ 420.600947][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.608439][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.401386][ T2895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.408846][ T2895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.757885][ T2895] veth1_macvtap: left promiscuous mode [ 421.770651][ T2895] veth0_macvtap: left promiscuous mode [ 421.788202][ T2895] veth1_vlan: left promiscuous mode [ 421.819860][ T2895] veth0_vlan: left promiscuous mode [ 424.583240][ T2895] team0 (unregistering): Port device team_slave_1 removed [ 424.716655][ T2895] team0 (unregistering): Port device team_slave_0 removed [ 424.846245][ T29] audit: type=1326 audit(1730651587.406:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8832 comm="syz.1.667" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33717e719 code=0x0 [ 426.658899][ T8657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.667040][ T8657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.702632][ T8657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.867222][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.875838][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.036120][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.053568][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.197434][ T8813] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.206603][ T8813] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.215638][ T8813] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.224768][ T8813] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.498217][ T8865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.199400][ T8865] batadv_slave_0: entered promiscuous mode [ 430.528748][ T8657] hsr_slave_0: entered promiscuous mode [ 430.539720][ T8657] hsr_slave_1: entered promiscuous mode [ 430.840488][ T8657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.003241][ T8657] Cannot create hsr debugfs directory [ 431.609726][ T5857] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 432.244088][ T8902] netlink: 52 bytes leftover after parsing attributes in process `syz.5.682'. [ 432.330826][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.682'. [ 432.930933][ T8907] hub 6-0:1.0: USB hub found [ 432.938173][ T8907] hub 6-0:1.0: 1 port detected [ 433.825667][ T29] audit: type=1326 audit(1730651596.256:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8906 comm="syz.0.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc48e77e719 code=0x0 [ 435.996721][ T8942] netlink: 176 bytes leftover after parsing attributes in process `syz.5.692'. [ 437.815890][ T8949] bridge2: entered promiscuous mode [ 437.821404][ T8949] bridge2: entered allmulticast mode [ 438.597748][ T5903] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 439.390798][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 440.208082][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.279209][ T5903] usb 2-1: config 0 has no interfaces? [ 440.341310][ T5903] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 440.360647][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.394030][ T5903] usb 2-1: config 0 descriptor?? [ 440.424733][ T8657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 440.454801][ T5903] usb 2-1: can't set config #0, error -71 [ 440.471909][ T5903] usb 2-1: USB disconnect, device number 9 [ 440.574382][ T8657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 440.695973][ T8657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 440.730848][ T8657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 440.960186][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 442.736547][ T8657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.822810][ T8657] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.858710][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.866001][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.672793][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.679961][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.644218][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.650837][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.975541][ T8657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.181543][ T29] audit: type=1326 audit(1730651609.716:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.4.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f477437e719 code=0x0 [ 448.613514][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 449.657910][ T8657] veth0_vlan: entered promiscuous mode [ 449.761335][ T9107] hub 6-0:1.0: USB hub found [ 449.770990][ T9107] hub 6-0:1.0: 1 port detected [ 450.365517][ T8657] veth1_vlan: entered promiscuous mode [ 450.895438][ T8657] veth0_macvtap: entered promiscuous mode [ 450.906299][ T8657] veth1_macvtap: entered promiscuous mode [ 450.925412][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.936132][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.946036][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.956529][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.966505][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.977188][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.989202][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.999265][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.009822][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.019734][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.030703][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.040941][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.051436][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.061338][ T8657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.071843][ T8657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.084474][ T8657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.095711][ T8657] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.104547][ T8657] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.113409][ T8657] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.122346][ T8657] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.034692][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.079416][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.199069][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.207060][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.052210][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.115189][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.150941][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.170656][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.187732][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.206655][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.251245][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.265392][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.277719][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.285343][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.292970][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.301405][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.308862][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.317152][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.324841][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.332472][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.342044][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.350860][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.360672][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.368133][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.375747][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.383286][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.390888][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.398347][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.406467][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.416681][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.424386][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.432331][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.439780][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.447270][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.454752][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.462587][ T5903] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 454.551036][ T5903] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 455.267403][ T29] audit: type=1326 audit(1730651617.826:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9150 comm="syz.1.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc33717e719 code=0x0 [ 458.761025][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 458.920887][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 458.933048][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.945664][ T5844] usb 1-1: config 0 has no interfaces? [ 458.963376][ T5844] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 458.981271][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.027163][ T5844] usb 1-1: config 0 descriptor?? [ 459.474226][ T9197] hub 6-0:1.0: USB hub found [ 459.480877][ T9197] hub 6-0:1.0: 1 port detected [ 459.824825][ T9199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.011775][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.269084][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.862683][ T5849] usb 1-1: USB disconnect, device number 4 [ 462.477503][ T29] audit: type=1326 audit(1730651625.036:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.4.750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f477437e719 code=0x0 [ 466.491061][ T9268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.295756][ T9281] xt_l2tp: invalid flags combination: 0 [ 468.917932][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 470.548580][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.558638][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.567686][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.577375][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.642388][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 470.652487][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 471.450285][ T9333] serio: Serial port pts0 [ 471.663307][ T8275] bridge_slave_1: left allmulticast mode [ 471.699657][ T8275] bridge_slave_1: left promiscuous mode [ 471.737195][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.775858][ T8275] bridge_slave_0: left allmulticast mode [ 471.801589][ T8275] bridge_slave_0: left promiscuous mode [ 471.807497][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.566008][ T5852] Bluetooth: hci3: command tx timeout [ 474.288160][ T9361] [ 474.290537][ T9361] ============================================ [ 474.296875][ T9361] WARNING: possible recursive locking detected [ 474.303040][ T9361] 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 Not tainted [ 474.310169][ T9361] -------------------------------------------- [ 474.316505][ T9361] syz.3.784/9361 is trying to acquire lock: [ 474.322412][ T9361] ffff888024b68200 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0xb0/0x820 [ 474.331651][ T9361] [ 474.331651][ T9361] but task is already holding lock: [ 474.339027][ T9361] ffff88807a595200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 474.348010][ T9361] [ 474.348010][ T9361] other info that might help us debug this: [ 474.356090][ T9361] Possible unsafe locking scenario: [ 474.356090][ T9361] [ 474.363560][ T9361] CPU0 [ 474.366853][ T9361] ---- [ 474.370157][ T9361] lock(&trie->lock); [ 474.374264][ T9361] lock(&trie->lock); [ 474.378366][ T9361] [ 474.378366][ T9361] *** DEADLOCK *** [ 474.378366][ T9361] [ 474.386520][ T9361] May be due to missing lock nesting notation [ 474.386520][ T9361] [ 474.394882][ T9361] 3 locks held by syz.3.784/9361: [ 474.399924][ T9361] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x24b/0x6c0 [ 474.409999][ T9361] #1: ffff88807a595200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 474.419446][ T9361] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x1d6/0x5a0 [ 474.429231][ T9361] [ 474.429231][ T9361] stack backtrace: [ 474.435146][ T9361] CPU: 1 UID: 0 PID: 9361 Comm: syz.3.784 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 474.445788][ T9361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 474.455886][ T9361] Call Trace: [ 474.459190][ T9361] [ 474.462152][ T9361] dump_stack_lvl+0x116/0x1f0 [ 474.466889][ T9361] print_deadlock_bug+0x2e3/0x410 [ 474.472023][ T9361] __lock_acquire+0x2185/0x3ce0 [ 474.476938][ T9361] ? __pfx___lock_acquire+0x10/0x10 [ 474.482185][ T9361] ? __lock_acquire+0xbdd/0x3ce0 [ 474.487327][ T9361] lock_acquire.part.0+0x11b/0x380 [ 474.492521][ T9361] ? trie_delete_elem+0xb0/0x820 [ 474.497721][ T9361] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 474.503427][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.509127][ T9361] ? rcu_is_watching+0x12/0xc0 [ 474.513993][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.519878][ T9361] ? trace_lock_acquire+0x14a/0x1d0 [ 474.525259][ T9361] ? trie_delete_elem+0xb0/0x820 [ 474.530286][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.535997][ T9361] ? lock_acquire+0x2f/0xb0 [ 474.540570][ T9361] ? trie_delete_elem+0xb0/0x820 [ 474.545586][ T9361] _raw_spin_lock_irqsave+0x3a/0x60 [ 474.550862][ T9361] ? trie_delete_elem+0xb0/0x820 [ 474.555879][ T9361] trie_delete_elem+0xb0/0x820 [ 474.560712][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.566390][ T9361] ? bpf_trace_run4+0x1d6/0x5a0 [ 474.571317][ T9361] bpf_prog_8c8ab8634bca3061+0x43/0x51 [ 474.576806][ T9361] bpf_trace_run4+0x248/0x5a0 [ 474.581517][ T9361] ? __pfx_bpf_trace_run4+0x10/0x10 [ 474.586746][ T9361] ? percpu_ref_get_many+0x1c/0xf0 [ 474.591899][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.597572][ T9361] ? __memcg_kmem_charge_page+0x218/0x420 [ 474.603310][ T9361] __alloc_pages_noprof+0x3a5/0x25a0 [ 474.608616][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.614276][ T9361] ? hlock_class+0x4e/0x130 [ 474.618836][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.624526][ T9361] ? __lock_acquire+0xbdd/0x3ce0 [ 474.629512][ T9361] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 474.635269][ T9361] ? __lock_acquire+0x163e/0x3ce0 [ 474.640408][ T9361] ? __pfx___lock_acquire+0x10/0x10 [ 474.645640][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.651309][ T9361] ? lock_acquire.part.0+0x11b/0x380 [ 474.656623][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.662287][ T9361] ? find_held_lock+0x2d/0x110 [ 474.667091][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.672757][ T9361] ? bpf_map_get_memcg.isra.0+0x190/0x670 [ 474.678611][ T9361] ___kmalloc_large_node+0x84/0x1b0 [ 474.683858][ T9361] __kmalloc_large_node_noprof+0x1c/0x70 [ 474.689541][ T9361] __kmalloc_node_noprof.cold+0x5/0x5f [ 474.695041][ T9361] ? bpf_map_kmalloc_node+0x98/0x4a0 [ 474.700370][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.706041][ T9361] bpf_map_kmalloc_node+0x98/0x4a0 [ 474.711204][ T9361] trie_update_elem+0x1ef/0xe00 [ 474.716096][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.721765][ T9361] ? trace_lock_acquire+0x14a/0x1d0 [ 474.727005][ T9361] ? bpf_map_update_value+0x24b/0x6c0 [ 474.732594][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.738263][ T9361] ? bpf_map_update_value+0x24b/0x6c0 [ 474.744062][ T9361] bpf_map_update_value+0x2c4/0x6c0 [ 474.749334][ T9361] map_update_elem+0x606/0x8f0 [ 474.754236][ T9361] ? __pfx_map_update_elem+0x10/0x10 [ 474.759570][ T9361] ? __might_fault+0xe3/0x190 [ 474.764287][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.769985][ T9361] __sys_bpf+0x14bb/0x49a0 [ 474.774458][ T9361] ? __pfx___sys_bpf+0x10/0x10 [ 474.779282][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.784989][ T9361] ? __fget_files+0x23a/0x3f0 [ 474.789711][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.795378][ T9361] ? do_futex+0x123/0x350 [ 474.799751][ T9361] ? __pfx_do_futex+0x10/0x10 [ 474.804482][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.810151][ T9361] ? xfd_validate_state+0x5d/0x180 [ 474.815291][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.820961][ T9361] ? rcu_is_watching+0x12/0xc0 [ 474.825770][ T9361] __x64_sys_bpf+0x78/0xc0 [ 474.830213][ T9361] ? srso_alias_return_thunk+0x5/0xfbef5 [ 474.835879][ T9361] ? lockdep_hardirqs_on+0x7c/0x110 [ 474.841134][ T9361] do_syscall_64+0xcd/0x250 [ 474.845669][ T9361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.851613][ T9361] RIP: 0033:0x7f92a417e719 [ 474.856048][ T9361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.875776][ T9361] RSP: 002b:00007f92a4f5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.884227][ T9361] RAX: ffffffffffffffda RBX: 00007f92a4336130 RCX: 00007f92a417e719 [ 474.892221][ T9361] RDX: 0000000000000020 RSI: 0000000020000180 RDI: 0000000000000002 [ 474.900210][ T9361] RBP: 00007f92a41f132e R08: 0000000000000000 R09: 0000000000000000 [ 474.908203][ T9361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.916281][ T9361] R13: 0000000000000000 R14: 00007f92a4336130 R15: 00007ffce8133a48 [ 474.924285][ T9361] [ 475.067009][ T8275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.082112][ T8275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.102021][ T8275] bond0 (unregistering): Released all slaves [ 475.264105][ T9320] chnl_net:caif_netlink_parms(): no params data found [ 475.463204][ T8275] hsr_slave_0: left promiscuous mode [ 475.477137][ T8275] hsr_slave_1: left promiscuous mode [ 475.487275][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.506079][ T8275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.600704][ T5852] Bluetooth: hci3: command tx timeout [ 475.955187][ T8275] team0 (unregistering): Port device team_slave_1 removed [ 475.982720][ T8275] team0 (unregistering): Port device team_slave_0 removed [ 476.243241][ T9320] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.257430][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.283768][ T9320] bridge_slave_0: entered allmulticast mode [ 476.301456][ T9320] bridge_slave_0: entered promiscuous mode [ 476.335067][ T9320] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.343522][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.351105][ T9320] bridge_slave_1: entered allmulticast mode [ 476.358028][ T9320] bridge_slave_1: entered promiscuous mode [ 476.398136][ T9320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.424741][ T9320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.488088][ T9320] team0: Port device team_slave_0 added [ 476.506928][ T9320] team0: Port device team_slave_1 added [ 476.567011][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.578394][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.611524][ T9320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.627621][ T9320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.635422][ T9320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.666686][ T9320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.729103][ T9320] hsr_slave_0: entered promiscuous mode [ 476.737536][ T9320] hsr_slave_1: entered promiscuous mode [ 476.746428][ T9320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.754069][ T9320] Cannot create hsr debugfs directory [ 476.866703][ T9320] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 476.885379][ T9320] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 476.894590][ T9320] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 476.904395][ T9320] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 476.989035][ T9320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.009757][ T9320] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.046942][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.054274][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.068212][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.075351][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.258878][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.497687][ T9320] veth0_vlan: entered promiscuous mode [ 477.513166][ T9320] veth1_vlan: entered promiscuous mode [ 477.537530][ T9320] veth0_macvtap: entered promiscuous mode [ 477.547139][ T9320] veth1_macvtap: entered promiscuous mode [ 477.565290][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.576607][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.588033][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.598879][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.609068][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.619841][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.629920][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.640718][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.652914][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.671871][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.682835][ T5852] Bluetooth: hci3: command tx timeout [ 477.694097][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.706088][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.716980][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.727088][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.738038][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.750569][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.761158][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.771056][ T9320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.781969][ T9320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.793324][ T9320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.816502][ T9320] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.825385][ T9320] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.834960][ T9320] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.843953][ T9320] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.877481][ T9320] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 477.902294][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.903455][ T9320] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 477.921845][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.946594][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.958314][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.761558][ T5852] Bluetooth: hci3: command tx timeout