last executing test programs: 2m34.468375531s ago: executing program 2 (id=6256): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1c, 0x2, @loopback, 0xf}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) 1m55.63115014s ago: executing program 2 (id=6256): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1c, 0x2, @loopback, 0xf}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) 1m22.110173291s ago: executing program 2 (id=6256): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1c, 0x2, @loopback, 0xf}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) 56.908995516s ago: executing program 2 (id=6256): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1c, 0x2, @loopback, 0xf}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) 29.269548522s ago: executing program 2 (id=6256): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1c, 0x2, @loopback, 0xf}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) 12.165700601s ago: executing program 1 (id=7891): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) r3 = gettid() setpgid(0x0, r3) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16], 0x120}, 0x1, 0x0, 0x0, 0x4004050}, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_dev$usbfs(0x0, 0x206, 0x8541) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x5522, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r8 = syz_io_uring_setup(0x487, &(0x7f0000000400)={0x0, 0x7079, 0x100, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1a, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 11.764722049s ago: executing program 4 (id=7893): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000810000000500040001000000050002000a"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) 10.662764744s ago: executing program 4 (id=7895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) getgid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020400) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r5, 0x3516, 0x4, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000680), 0x1f, 0x2) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000002c0), 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xac1414aa, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@remote}, {@dev}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 8.681899346s ago: executing program 4 (id=7897): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(r0) 8.555079176s ago: executing program 1 (id=7898): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x542e, 0xff4f370c567f0000) creat(0x0, 0xc1) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) fcntl$setpipe(r2, 0x407, 0x6) sendfile(r1, r1, 0x0, 0x80000000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) 7.17754254s ago: executing program 4 (id=7901): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0xa, @buffer={0x2, 0x50, &(0x7f00000001c0)=""/80}, &(0x7f0000000380)="f02d9374c96e", 0x0, 0x5, 0x0, 0x0, 0x0}) 6.243381146s ago: executing program 4 (id=7903): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x74, 0x8000003a, 0x0, 0x0, 0x3}, 0x1c) r1 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x20800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x10, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000400000005000a000000000008000400000100000800010045b32ce5eb4e6fcdd4ee171e8419d6c7d2ba2b3d33316bca5d4fa17ac4ffa86504d3cb3ea73305000082689b532ae961f3dacd10f4dce01e101a065f6c6bf07dd66105e9b31c02e795e599cc60073170e6434ba60192b1d5066af2b0", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0205710, &(0x7f0000000280)={0x0, 0x2, 0x100000, 0x0, 0x9}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 6.093914815s ago: executing program 1 (id=7905): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000810000000500040001000000050002000a0000"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) 6.047285825s ago: executing program 3 (id=7906): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x52c, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x464, 0x2e8, 0x2e8, 0x464, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x338, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r2}}, @common=@inet=@iprange={{0x64}, {@ipv4, @ipv4=@remote, @ipv4=@private=0xa010100, @ipv4=@remote, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x18}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1e, 0x72b3, 0xdad, 0x4, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) syz_open_dev$sg(&(0x7f0000000380), 0x4, 0x4200) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000feffffff000000000200000018110000", @ANYRES32, @ANYBLOB="0000010000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYBLOB="0000000000000000bf91000000000000b702000001000000850000008500"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="300000002c0001000000000000"], 0x30}], 0x1}, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r7) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r8) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x1, 0x3, 0x0, 0x8, 0x1, 0x200000000}, 0x0, 0x0) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r9, &(0x7f0000000cc0)={'syz0\x00', {0x9, 0x0, 0x0, 0x3}, 0x48, [0x1400000, 0x1, 0xd0, 0x7fff, 0x5, 0x7, 0x4, 0x6aa51a28, 0x1891ffb7, 0x2, 0x6e8, 0x7, 0x6, 0x3, 0x10000, 0x7, 0x8, 0x2, 0x1, 0xd, 0x5c01, 0x1, 0x80b7, 0x6, 0xb4, 0x7595, 0x9, 0x8, 0x8, 0xd, 0x0, 0x2, 0x9, 0x20005, 0x4c, 0x3, 0x2, 0xbc, 0x8001, 0x4, 0xfffffffe, 0x40, 0xf, 0xfff, 0xfffffe00, 0x80000001, 0x7, 0x9, 0x2, 0x6, 0x6, 0x0, 0x401, 0x7, 0xffff, 0x9, 0x3, 0x2, 0xe4, 0x23380, 0x8, 0xfff, 0x3d4fffc, 0x200], [0x8, 0xb, 0xf2de, 0x8, 0x8, 0x10, 0xe, 0x6, 0xfffffffa, 0x8, 0x3dc6, 0x9, 0x9, 0xd361, 0x8000, 0x6, 0x4, 0x2489, 0x9d, 0xfff, 0x10, 0x10001, 0xc0, 0xb, 0xffff, 0x563, 0x5, 0x2c308c93, 0x7fffffff, 0x71e6, 0xe, 0xe969, 0x2, 0x2, 0x6, 0x0, 0xc0000, 0x74cb9859, 0x2, 0xfffffff7, 0x4, 0x6, 0x7, 0x7, 0x80, 0x72012756, 0x6, 0x152, 0xc, 0x6, 0x0, 0x7, 0x2, 0x80000000, 0x5, 0x3, 0x3, 0x1000, 0x7, 0xfd2e, 0x3ff, 0x5, 0x5, 0xe], [0x101, 0x2, 0x23f4, 0x3, 0x34, 0x55, 0x63, 0xffffffff, 0x9, 0xd8, 0x3c6, 0x1, 0x1, 0x9, 0xd, 0xfff, 0x800002, 0x1ff, 0x7, 0x200, 0x3, 0x0, 0x8, 0x34c, 0x2, 0x8001, 0x92, 0x3, 0xfffffe00, 0x2, 0x7fff, 0xfd, 0x8, 0x3ff, 0x5, 0x3, 0xde3, 0x6, 0x5, 0xffffe25a, 0x3, 0x9, 0x7, 0x6, 0x6, 0x203, 0x3, 0x7, 0x168e, 0x9, 0x4, 0x15c, 0x9, 0x9d, 0xfffffffe, 0x401, 0x3f, 0xfc8a, 0x4, 0x7fff, 0x7, 0x7f, 0x1, 0xa23], [0x100, 0x8, 0x5, 0x8d1, 0x0, 0x6, 0xfffff665, 0x834, 0x6, 0x9, 0x5, 0x4, 0xc6, 0x81, 0xfffffffe, 0xfffffffc, 0x0, 0x240, 0x401, 0x5, 0x4, 0x9, 0x3, 0xf4b, 0x8000001, 0xfffffffd, 0x7, 0x7, 0x1fb, 0xb7, 0x7, 0x401, 0x5, 0x1, 0x1, 0xcd66, 0x8, 0x9, 0x4, 0x8001, 0x9, 0xfffffffc, 0x5606, 0x3, 0x4, 0x0, 0x2, 0x2, 0xfae7, 0x40001, 0x0, 0x1, 0x8, 0x100, 0x2, 0xffffffff, 0x5, 0xfffff82c, 0x8, 0x4, 0x6, 0x81, 0x6, 0xffff4609]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r5, 0x89f2, &(0x7f0000000100)={0x2, 0xb6, 0x8, 0x18000, 0x6, "b100002ef85f6300002af7c1a024b065b000"}) socket$nl_generic(0x10, 0x3, 0x10) 5.652158494s ago: executing program 0 (id=7907): mkdir(0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_io_uring_setup(0x118, &(0x7f0000000100)={0x0, 0x2, 0x10, 0xfffffffc, 0x3a6}, &(0x7f0000000000), 0x0) r3 = socket(0x10, 0x80003, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) recvmmsg(r3, &(0x7f00000019c0)=[{{&(0x7f0000000300)=@caif, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/133, 0x85}, {&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f0000000500)=""/252, 0xfc}, {&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000001a00)=""/109, 0x6d}, {&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000600)=""/107, 0x6b}, {&(0x7f0000000780)=""/33, 0x21}], 0x8, &(0x7f0000000800)=""/107, 0x6b}, 0x9}, {{&(0x7f0000000880)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1, &(0x7f0000001940)=""/69, 0x45}, 0x66e8}], 0x2, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) 4.836022991s ago: executing program 1 (id=7908): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') fchdir(r1) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) r3 = gettid() setpgid(0x0, r3) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16], 0x120}, 0x1, 0x0, 0x0, 0x4004050}, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000100)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8541) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x5522, 0x0) r7 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r7, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) r8 = syz_io_uring_setup(0x487, &(0x7f0000000400)={0x0, 0x7079, 0x100, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x1a, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) 4.505185419s ago: executing program 3 (id=7909): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) getgid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020400) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r5, 0x3516, 0x4, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1f, 0x2) ppoll(&(0x7f00000000c0)=[{r8, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xac1414aa, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@remote}, {@dev}, {@dev}, {@remote}]}]}}}}}}}, 0x0) 2.966082062s ago: executing program 0 (id=7910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendfile(r0, r0, 0x0, 0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000003c0)=0x5, 0x4) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x9}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxswO0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="3503000001000200140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) 2.754921641s ago: executing program 1 (id=7912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 2.675439791s ago: executing program 0 (id=7913): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280003003000000060"], 0xfdef) 1.710152617s ago: executing program 3 (id=7914): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(r0) 1.709783827s ago: executing program 1 (id=7915): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x542e, 0xff4f370c567f0000) creat(0x0, 0xc1) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) fcntl$setpipe(r2, 0x407, 0x6) sendfile(r1, r1, 0x0, 0x80000000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5412, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) 1.507279756s ago: executing program 0 (id=7916): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.423468786s ago: executing program 3 (id=7917): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0xa, @buffer={0x2, 0x50, &(0x7f00000001c0)=""/80}, &(0x7f0000000380)="f02d9374c96e", 0x0, 0x5, 0x0, 0x0, 0x0}) 1.223025655s ago: executing program 0 (id=7918): socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdf0100000001000000aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37ff95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14eca0e214d1257e4dd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50affffffff000000003a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841ac047c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a932"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000810000000500040001000000050002000a0000"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r9, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) 1.216150996s ago: executing program 4 (id=7919): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '`\x00\x00'}]}, 0x8) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xfba, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x8004552d, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) setgroups(0x352, &(0x7f0000000080)=[0x0, 0xee00]) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYBLOB], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019240)={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', r7, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5a2, @void, @value}, 0x94) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r3, 0x0, r8) write$sndseq(r9, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7dbd6ca3}, {}, {0x1}, @connect}], 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(0x0, &(0x7f0000019140), &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 1.112380425s ago: executing program 3 (id=7920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xc1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) unshare(0x400) syz_io_uring_setup(0x1002945, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) sendmmsg$inet6(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e23, 0xc, @remote, 0x9}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000001c0)}], 0x1}}], 0x2, 0x0) 208.975331ms ago: executing program 2 (id=6256): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1c, 0x2, @loopback, 0xf}, 0x1c) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000004000000"]) 0s ago: executing program 0 (id=7921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) getgid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x22020400) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x69c780}) io_uring_enter(r5, 0x3516, 0x4, 0x0, 0x0, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1f, 0x2) ppoll(&(0x7f00000000c0)=[{r8, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xac1414aa, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@remote}, {@dev}, {@dev}, {@remote}]}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 40 bytes leftover after parsing attributes in process `syz.3.7289'. [ 2638.685816][ T3812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.716623][ T3812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.741975][ T3812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2638.750683][ T3812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2639.710617][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7293'. [ 2639.744318][ T4063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7293'. [ 2640.896239][ T4376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2640.947734][ T4376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2640.949547][T29442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2640.999311][T29442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2641.030473][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2641.052657][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2641.269635][ T4099] input: syz0 as /devices/virtual/input/input89 [ 2641.898393][ T4110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7302'. [ 2643.212388][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 2643.212398][ T26] audit: type=1326 audit(1738236153.187:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.425677][ T26] audit: type=1326 audit(1738236153.187:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.486929][T29442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2643.548298][ T26] audit: type=1326 audit(1738236153.257:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.600766][ T26] audit: type=1326 audit(1738236153.257:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.656503][ T26] audit: type=1326 audit(1738236153.257:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.686288][ T26] audit: type=1326 audit(1738236153.257:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.715678][ T26] audit: type=1326 audit(1738236153.267:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.742694][ T26] audit: type=1326 audit(1738236153.267:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.776525][ T4119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7304'. [ 2643.788477][ T26] audit: type=1326 audit(1738236153.267:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.837452][ T26] audit: type=1326 audit(1738236153.267:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4120 comm="syz.1.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2643.881055][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7308'. [ 2643.906801][ T4129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7308'. [ 2643.954692][T29442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2644.050722][T29442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2644.099875][T29442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2645.166389][T29442] device hsr_slave_0 left promiscuous mode [ 2645.191642][ T4188] x_tables: duplicate entry at hook 2 [ 2645.213202][T29442] device hsr_slave_1 left promiscuous mode [ 2645.235421][T29442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2645.268831][T29442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2645.287875][T29442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2645.299586][ T4182] block device autoloading is deprecated and will be removed. [ 2645.307691][T29442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2645.336427][T29442] device bridge_slave_1 left promiscuous mode [ 2645.394513][T29442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2645.443316][T29442] device bridge_slave_0 left promiscuous mode [ 2645.472135][T29442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2645.587852][T29442] device veth1_macvtap left promiscuous mode [ 2645.595994][T29442] device veth0_macvtap left promiscuous mode [ 2645.606253][T29442] device veth1_vlan left promiscuous mode [ 2645.625599][T29442] device veth0_vlan left promiscuous mode [ 2645.721918][T31176] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2646.852030][T31176] usb 4-1: Using ep0 maxpacket: 32 [ 2646.859060][T31176] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2646.871854][T31176] usb 4-1: config 0 has no interface number 0 [ 2646.878038][T31176] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2646.888175][T31176] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2646.903342][T31176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2646.938895][T31176] usb 4-1: config 0 descriptor?? [ 2646.980310][T31176] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 2647.132871][ T2207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2647.144176][ T2207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2647.162362][ T2207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2647.179324][ T2207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2647.186893][ T2207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2647.194537][ T2207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2647.696749][T29442] team0 (unregistering): Port device team_slave_1 removed [ 2647.739899][T29442] team0 (unregistering): Port device team_slave_0 removed [ 2647.785377][T29442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2647.827391][T29442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2648.298416][T29442] bond0 (unregistering): Released all slaves [ 2648.384740][ T4205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7316'. [ 2648.504266][ T4221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7321'. [ 2648.556865][T10752] usb 4-1: USB disconnect, device number 37 [ 2648.595798][ T4216] lo speed is unknown, defaulting to 1000 [ 2648.932204][ T4240] input: syz0 as /devices/virtual/input/input90 [ 2648.953675][ T4242] x_tables: duplicate entry at hook 2 [ 2649.381955][ T9680] Bluetooth: hci4: command 0x0409 tx timeout [ 2651.516332][ T4276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7334'. [ 2651.530122][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 2651.999650][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.005969][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.175789][ T4216] chnl_net:caif_netlink_parms(): no params data found [ 2652.277477][ T4285] capability: warning: `syz.4.7338' uses 32-bit capabilities (legacy support in use) [ 2652.431919][T18168] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2652.538024][ T4216] bridge0: port 1(bridge_slave_0) entered blocking state [ 2652.582286][ T4216] bridge0: port 1(bridge_slave_0) entered disabled state [ 2652.590354][ T4216] device bridge_slave_0 entered promiscuous mode [ 2652.621890][T18168] usb 4-1: Using ep0 maxpacket: 32 [ 2652.629363][T18168] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2652.677137][T18168] usb 4-1: config 0 has no interface number 0 [ 2652.684594][ T4216] bridge0: port 2(bridge_slave_1) entered blocking state [ 2652.691679][ T4216] bridge0: port 2(bridge_slave_1) entered disabled state [ 2652.725620][T18168] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2652.777283][ T4216] device bridge_slave_1 entered promiscuous mode [ 2652.784041][T18168] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2652.834128][T18168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2652.902641][T18168] usb 4-1: config 0 descriptor?? [ 2652.950983][T18168] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 2653.026965][ T4216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2653.069399][ T4216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2653.130840][ T4216] team0: Port device team_slave_0 added [ 2653.151081][ T4216] team0: Port device team_slave_1 added [ 2653.208036][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2653.235522][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2653.274918][ T4314] input: syz0 as /devices/virtual/input/input91 [ 2653.282055][T16135] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2653.328223][ T4216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2653.351415][ T4216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2653.358493][ T4216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2653.384748][ T4216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2653.482066][T16135] usb 1-1: Using ep0 maxpacket: 32 [ 2653.490099][T16135] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2653.504745][ T4216] device hsr_slave_0 entered promiscuous mode [ 2653.512011][T16135] usb 1-1: config 0 has no interfaces? [ 2653.517731][T16135] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2653.535011][T16135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2653.545640][ T4216] device hsr_slave_1 entered promiscuous mode [ 2653.561636][T16135] usb 1-1: config 0 descriptor?? [ 2653.598029][ T4216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2653.611901][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 2653.639213][ T4216] Cannot create hsr debugfs directory [ 2654.008707][ T4324] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2655.167050][T16135] usb 4-1: USB disconnect, device number 38 [ 2655.222215][ T4339] loop1: detected capacity change from 0 to 2048 [ 2655.413048][ T4339] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2655.455001][ T4216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2655.476459][ T4339] rdma_rxe: rxe_register_device failed with error -23 [ 2655.671724][ T4339] rdma_rxe: failed to add lo [ 2655.692426][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 2655.940142][ T4349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7347'. [ 2655.977105][ T4216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2656.187593][T29794] usb 1-1: USB disconnect, device number 46 [ 2656.227392][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 2656.227406][ T26] audit: type=1800 audit(1738236166.197:342): pid=4339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7346" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 2656.261152][ T4216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2656.304978][ T4216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2656.350175][T32051] EXT4-fs (loop1): unmounting filesystem. [ 2656.598204][ T4216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2656.989922][T29442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2657.010461][T29442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2657.021120][ T4216] 8021q: adding VLAN 0 to HW filter on device team0 [ 2657.047338][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2657.070012][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2657.219414][T32635] bridge0: port 1(bridge_slave_0) entered blocking state [ 2657.226601][T32635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2657.771919][ T9680] Bluetooth: hci4: command 0x0405 tx timeout [ 2658.072727][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2658.100256][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2658.114261][T32635] bridge0: port 2(bridge_slave_1) entered blocking state [ 2658.121448][T32635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2658.181293][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2659.181978][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2659.193098][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2659.202118][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2659.213076][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2659.223402][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2659.280510][ T4216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2659.330482][ T4216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2659.359201][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2659.379059][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2659.485239][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2659.499126][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2659.509349][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2659.524223][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2659.547991][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2659.612720][T16135] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2659.802320][T16135] usb 4-1: Using ep0 maxpacket: 32 [ 2659.815747][T16135] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2659.986924][T16135] usb 4-1: config 0 has no interfaces? [ 2660.089662][T16135] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2660.252219][T16135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2660.341004][ T4408] rdma_rxe: rxe_register_device failed with error -23 [ 2660.350295][ T4408] rdma_rxe: failed to add lo [ 2660.479355][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2660.487552][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2660.515658][ T4216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2660.529959][T16135] usb 4-1: config 0 descriptor?? [ 2660.592005][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2660.608943][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2660.668823][ T4216] device veth0_vlan entered promiscuous mode [ 2660.693042][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2660.711642][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2660.736968][ T4216] device veth1_vlan entered promiscuous mode [ 2660.835235][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2660.859078][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2661.624537][ T4425] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2661.730619][ T4420] loop4: detected capacity change from 0 to 1024 [ 2661.780084][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2661.980627][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2662.026691][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2662.268510][ T4216] device veth0_macvtap entered promiscuous mode [ 2662.289642][ T4216] device veth1_macvtap entered promiscuous mode [ 2662.310497][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2662.324431][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2662.385377][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2662.408774][T29661] EXT4-fs (loop4): unmounting filesystem. [ 2662.435604][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2662.446576][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.456821][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2662.467499][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.477559][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2662.488190][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.499228][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2662.508145][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2662.547910][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2662.557372][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2662.572287][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.624285][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.661973][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.672692][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.683176][ T4216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2662.693835][ T4216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2662.709974][ T4216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2662.755305][ T4216] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.764905][ T4216] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.773858][ T4216] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.782804][ T4216] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2662.857223][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2662.884538][T29442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2662.889273][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2663.729852][T11017] usb 4-1: USB disconnect, device number 39 [ 2663.746021][T29442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2663.772577][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2663.781269][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2663.799100][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2663.867477][T29442] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2666.561989][ T4476] input: syz0 as /devices/virtual/input/input92 [ 2668.579046][ T4498] loop1: detected capacity change from 0 to 1024 [ 2668.659058][ T4498] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2668.737990][ T4498] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 2669.124831][ T4498] JBD2: no valid journal superblock found [ 2669.130645][ T4498] EXT4-fs (loop1): error loading journal [ 2672.660638][ T4541] input: syz0 as /devices/virtual/input/input93 [ 2672.721909][T18168] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2672.932010][T18168] usb 2-1: Using ep0 maxpacket: 8 [ 2672.943957][T18168] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 2672.981928][T18168] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2673.042001][T18168] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2673.087611][T18168] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2673.090912][ T26] audit: type=1326 audit(1738236183.057:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2673.130644][T18168] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2673.143928][ T4546] overlayfs: statfs failed on './file0' [ 2673.175077][ T26] audit: type=1326 audit(1738236183.097:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2673.207748][ T26] audit: type=1326 audit(1738236183.097:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2673.221963][T18168] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2673.258228][T18168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2673.271902][ T26] audit: type=1326 audit(1738236183.097:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2673.317084][T18168] usbtmc 2-1:16.0: bulk endpoints not found [ 2673.426883][ T26] audit: type=1326 audit(1738236183.097:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2673.504828][ T26] audit: type=1326 audit(1738236183.097:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2673.996062][ T26] audit: type=1326 audit(1738236183.097:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2674.157363][ T26] audit: type=1326 audit(1738236183.097:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4551 comm="syz.4.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2674.164696][T11958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2674.274271][ T4561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7403'. [ 2674.422430][T11958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2674.569758][T11958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2674.645771][T11958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2675.291752][T31176] usb 2-1: USB disconnect, device number 22 [ 2675.788105][T11958] device hsr_slave_0 left promiscuous mode [ 2675.795082][T11958] device hsr_slave_1 left promiscuous mode [ 2675.801521][T11958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2675.809446][T11958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2675.818204][T11958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2675.825883][T11958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2675.837379][T11958] device bridge_slave_1 left promiscuous mode [ 2675.844867][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 2675.858027][T11958] device bridge_slave_0 left promiscuous mode [ 2675.865766][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 2675.910795][T11958] device veth1_macvtap left promiscuous mode [ 2675.921696][T11958] device veth0_macvtap left promiscuous mode [ 2675.929965][T11958] device veth1_vlan left promiscuous mode [ 2675.940707][T11958] device veth0_vlan left promiscuous mode [ 2677.927472][ T4649] input: syz0 as /devices/virtual/input/input94 [ 2677.970494][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2677.994048][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2678.002361][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2678.014618][ T2207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2678.023334][ T2207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2678.034887][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2678.081895][T10638] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2678.218313][T11958] team0 (unregistering): Port device team_slave_1 removed [ 2678.260639][T11958] team0 (unregistering): Port device team_slave_0 removed [ 2678.291963][T10638] usb 4-1: Using ep0 maxpacket: 8 [ 2678.313148][T10638] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2678.316013][T11958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2678.321596][T10638] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2678.341081][T10638] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2678.351082][T10638] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2678.362519][T10638] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2678.377951][T10638] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2678.391240][T10638] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2678.400404][T10638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2678.421151][T11958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2678.422456][T10638] usbtmc: probe of 4-1:16.0 failed with error -22 [ 2678.912499][T11958] bond0 (unregistering): Released all slaves [ 2679.226213][ T4648] lo speed is unknown, defaulting to 1000 [ 2680.141961][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 2680.836435][T11017] usb 4-1: USB disconnect, device number 40 [ 2681.186366][T18168] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2681.280378][ T4648] chnl_net:caif_netlink_parms(): no params data found [ 2681.386221][T18168] usb 5-1: Using ep0 maxpacket: 8 [ 2681.396980][T18168] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 2681.498280][T18168] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2681.535698][ T4680] overlayfs: statfs failed on './file0' [ 2681.574849][T18168] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2681.596231][T18168] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2681.606759][T18168] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2681.624787][T18168] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2681.634062][T18168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2681.654528][T18168] usbtmc 5-1:16.0: bulk endpoints not found [ 2681.791882][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state [ 2681.831203][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 2681.848250][ T4648] device bridge_slave_0 entered promiscuous mode [ 2682.322252][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state [ 2682.357966][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state [ 2682.409333][ T4648] device bridge_slave_1 entered promiscuous mode [ 2682.535347][ T4648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2682.564660][ T4648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2682.612530][ T9680] Bluetooth: hci4: command 0x041b tx timeout [ 2682.641207][ T4648] team0: Port device team_slave_0 added [ 2682.653402][ T4648] team0: Port device team_slave_1 added [ 2682.703672][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2682.710639][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2682.762055][ T4648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2682.774554][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2682.788135][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2682.900673][ T4648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2683.249748][ T4648] device hsr_slave_0 entered promiscuous mode [ 2683.411192][ T4648] device hsr_slave_1 entered promiscuous mode [ 2683.567729][ T4648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2683.680393][ T4648] Cannot create hsr debugfs directory [ 2684.053867][T29794] usb 5-1: USB disconnect, device number 33 [ 2685.075837][ T9680] Bluetooth: hci4: command 0x040f tx timeout [ 2685.093299][ T4725] input: syz0 as /devices/virtual/input/input95 [ 2685.646071][T29794] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2685.841893][T29794] usb 5-1: Using ep0 maxpacket: 8 [ 2685.848724][T29794] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2685.881492][T29794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2685.912213][T29794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2685.925838][T29794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2686.021873][T29794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 2686.031729][T29794] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2686.057772][T29794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2686.078535][T29794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2686.115643][T29794] usbtmc: probe of 5-1:16.0 failed with error -22 [ 2686.371573][ T4758] loop3: detected capacity change from 0 to 2048 [ 2686.600198][ T4758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2686.611288][ T4648] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2686.621352][ T4648] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2686.631648][ T4648] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2686.640986][ T4648] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2687.131922][ T9680] Bluetooth: hci4: command 0x0419 tx timeout [ 2687.324393][ T4770] rdma_rxe: already configured on lo [ 2687.402363][ T26] audit: type=1800 audit(1738236197.347:351): pid=4758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7436" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 2687.488141][ T4648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2687.520985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2687.535930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2687.549457][T30947] EXT4-fs (loop3): unmounting filesystem. [ 2687.599733][ T4648] 8021q: adding VLAN 0 to HW filter on device team0 [ 2687.645319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2687.654473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2687.692496][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 2687.699637][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2687.742487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2687.750786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2687.760011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2687.895420][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 2687.902599][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2687.949091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2688.006889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2688.665034][ T3145] usb 5-1: USB disconnect, device number 34 [ 2688.687828][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2688.762231][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2688.770796][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2688.780150][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2688.789409][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2688.802873][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2688.811229][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2688.849831][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2688.895247][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2688.919322][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2689.039390][ T4802] input: syz0 as /devices/virtual/input/input96 [ 2689.083347][ T4791] overlayfs: statfs failed on './file0' [ 2690.605450][ T4648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2690.644722][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2690.691022][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2690.745177][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2690.772559][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2690.842225][ T4648] device veth0_vlan entered promiscuous mode [ 2690.866558][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2690.905505][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2690.925462][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2690.934024][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2690.953058][ T4648] device veth1_vlan entered promiscuous mode [ 2691.025623][ T4648] device veth0_macvtap entered promiscuous mode [ 2691.062816][ T4648] device veth1_macvtap entered promiscuous mode [ 2691.103227][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2691.121648][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2691.176669][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2691.215586][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2691.246053][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2691.278298][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2691.302315][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2691.368259][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2691.421369][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2691.479365][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2691.529443][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2691.540280][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2691.599111][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2692.244475][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2692.272544][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.291923][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2692.361919][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.390454][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2692.427491][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2692.451197][ T4853] loop4: detected capacity change from 0 to 512 [ 2692.460848][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2692.502509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2692.511764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2692.549557][ T4853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2692.563324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2692.646824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2692.686259][ T4648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2692.731094][ T4648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2692.740116][ T4648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2692.748944][T18168] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2692.757113][ T4648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2692.869639][T29661] EXT4-fs (loop4): unmounting filesystem. [ 2692.951939][T18168] usb 1-1: Using ep0 maxpacket: 32 [ 2692.963914][T16281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2692.973454][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2692.981573][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2692.986831][T18168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2693.016208][T16281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2693.340149][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2693.436835][T32622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2693.578029][T18168] usb 1-1: config 0 has no interfaces? [ 2693.583632][T18168] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2693.691927][T18168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2693.719033][T18168] usb 1-1: config 0 descriptor?? [ 2693.812192][ T4876] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7462'. [ 2694.760100][ T4887] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2696.452368][T11017] usb 1-1: USB disconnect, device number 47 [ 2697.780535][T11958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.083510][T11958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.114929][ T4941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7475'. [ 2699.381591][T11958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2699.485617][T11958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2700.681553][T11958] device hsr_slave_0 left promiscuous mode [ 2700.688619][T11958] device hsr_slave_1 left promiscuous mode [ 2700.695414][T11958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2700.703485][T11958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2700.711706][T11958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2700.719478][T11958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2700.727445][T11958] device bridge_slave_1 left promiscuous mode [ 2700.733977][T11958] bridge0: port 2(bridge_slave_1) entered disabled state [ 2700.743178][T11958] device bridge_slave_0 left promiscuous mode [ 2700.749386][T11958] bridge0: port 1(bridge_slave_0) entered disabled state [ 2700.784072][T11958] device veth1_macvtap left promiscuous mode [ 2700.790116][T11958] device veth0_macvtap left promiscuous mode [ 2700.796576][T11958] device veth1_vlan left promiscuous mode [ 2700.802549][T11958] device veth0_vlan left promiscuous mode [ 2701.680431][ T5019] loop3: detected capacity change from 0 to 2048 [ 2701.739531][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2701.763636][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2701.777447][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2701.787690][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2701.801706][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2701.812413][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2701.830867][ T5019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2701.855850][ T5019] rdma_rxe: already configured on lo [ 2701.914990][ T26] audit: type=1800 audit(1738236211.887:352): pid=5019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7483" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 2702.231779][T30947] EXT4-fs (loop3): unmounting filesystem. [ 2702.294833][ T5034] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2702.366209][T11958] team0 (unregistering): Port device team_slave_1 removed [ 2702.485153][T11958] team0 (unregistering): Port device team_slave_0 removed [ 2702.616093][T11958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2703.821979][T30703] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2703.877360][T11958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2703.938341][ T9680] Bluetooth: hci4: command 0x0409 tx timeout [ 2704.031891][T30703] usb 1-1: Using ep0 maxpacket: 32 [ 2704.039039][T30703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2704.054429][T30703] usb 1-1: config 0 has no interfaces? [ 2704.060082][T30703] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2704.071295][T30703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2704.081657][T30703] usb 1-1: config 0 descriptor?? [ 2704.416881][T11958] bond0 (unregistering): Released all slaves [ 2704.591662][ T5051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2705.165474][ T5036] netlink: 'syz.3.7488': attribute type 1 has an invalid length. [ 2705.196292][ T5022] lo speed is unknown, defaulting to 1000 [ 2706.012044][ T9680] Bluetooth: hci4: command 0x041b tx timeout [ 2706.117271][ T5079] loop4: detected capacity change from 0 to 2048 [ 2706.226632][T10638] usb 1-1: USB disconnect, device number 48 [ 2706.254910][ T5079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2706.371709][ T5079] rdma_rxe: rxe_register_device failed with error -23 [ 2706.401392][ T5022] chnl_net:caif_netlink_parms(): no params data found [ 2706.421934][ T5079] rdma_rxe: failed to add lo [ 2706.530830][ T26] audit: type=1800 audit(1738236216.497:353): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7498" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 2707.818246][T29661] EXT4-fs (loop4): unmounting filesystem. [ 2707.845017][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2708.005896][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2708.092149][ T9680] Bluetooth: hci4: command 0x040f tx timeout [ 2708.165284][ T5022] device bridge_slave_0 entered promiscuous mode [ 2708.326356][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2708.361249][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2708.429139][ T5022] device bridge_slave_1 entered promiscuous mode [ 2708.751090][ T5111] loop3: detected capacity change from 0 to 1024 [ 2708.766701][ T5111] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2709.972961][ T5022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2710.003416][ T5116] netlink: 'syz.0.7504': attribute type 1 has an invalid length. [ 2710.025634][ T5111] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.7503: bg 0: block 260: invalid block bitmap [ 2710.171911][ T9680] Bluetooth: hci4: command 0x0419 tx timeout [ 2710.232880][ T5022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2710.245815][T30947] EXT4-fs (loop3): unmounting filesystem. [ 2710.514289][ T5137] input: syz0 as /devices/virtual/input/input98 [ 2710.561644][ T5022] team0: Port device team_slave_0 added [ 2710.618751][ T5022] team0: Port device team_slave_1 added [ 2710.834324][ T5022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2710.854990][ T5022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2710.952176][ T5022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2710.987561][ T5022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2711.012099][ T5022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2711.082417][ T5022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2711.183564][ T5022] device hsr_slave_0 entered promiscuous mode [ 2711.234789][ T5022] device hsr_slave_1 entered promiscuous mode [ 2711.330401][ T5022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2711.381909][ T5022] Cannot create hsr debugfs directory [ 2713.144101][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.150526][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.578679][ T5183] netlink: 'syz.4.7518': attribute type 1 has an invalid length. [ 2713.599112][ T5183] device bond10 entered promiscuous mode [ 2713.606078][ T5183] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2714.949451][ T5183] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2715.014464][ T5183] bond10: (slave bond11): making interface the new active one [ 2715.031958][ T5183] device bond11 entered promiscuous mode [ 2715.038643][ T5183] bond10: (slave bond11): Enslaving as an active interface with an up link [ 2715.194834][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 2715.453575][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2715.489336][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2715.508622][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2715.543991][ T5209] device bridge_slave_0 left promiscuous mode [ 2715.565008][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state [ 2715.579953][ T5209] device bridge_slave_1 left promiscuous mode [ 2715.597439][ T5209] bridge0: port 2(bridge_slave_1) entered disabled state [ 2715.665510][ T5209] bond0: (slave bond_slave_0): Releasing backup interface [ 2715.725807][ T5209] bond0: (slave bond_slave_1): Releasing backup interface [ 2717.094148][ T5209] team0: Port device team_slave_0 removed [ 2717.123230][ T5209] team0: Port device team_slave_1 removed [ 2717.129641][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2717.140441][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2717.159676][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2717.212587][ T5209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2717.273000][ T5209] bond8: (slave bond9): Releasing backup interface [ 2717.289561][ T5209] device bond9 left promiscuous mode [ 2717.360869][ T5209] bond10: (slave bond11): Releasing backup interface [ 2717.369294][ T5209] device bond11 left promiscuous mode [ 2717.408038][ T5212] team0: Mode changed to "loadbalance" [ 2717.810865][ T5022] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2717.844246][ T5022] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2717.874881][ T5022] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2718.018878][ T5022] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2719.007225][ T5022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2719.064970][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2719.088553][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2720.842672][ T5022] 8021q: adding VLAN 0 to HW filter on device team0 [ 2720.937442][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2720.970775][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2721.063161][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 2721.070431][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2721.109333][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2721.127696][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2721.265100][ T4390] bridge0: port 2(bridge_slave_1) entered blocking state [ 2721.272286][ T4390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2721.355521][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2722.130714][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2722.139630][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2722.149178][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2722.226291][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2722.288284][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2722.318294][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2722.352971][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2722.519757][ T5022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2723.656342][ T5304] loop3: detected capacity change from 0 to 1764 [ 2723.674049][ T5022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2723.715924][ T5304] isofs_fill_super: get root inode failed [ 2723.739011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2723.751238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2723.765771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2723.833914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2723.861021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2727.376457][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2727.388594][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2727.452751][ T5022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2727.909134][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2728.001983][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2728.317022][ T5022] device veth0_vlan entered promiscuous mode [ 2728.341061][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2728.369994][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2728.400613][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2729.476809][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2729.492103][ T5371] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7564'. [ 2729.516515][ T5022] device veth1_vlan entered promiscuous mode [ 2729.674649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2729.693611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2729.717538][ T5022] device veth0_macvtap entered promiscuous mode [ 2729.746021][ T5022] device veth1_macvtap entered promiscuous mode [ 2729.829742][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2729.888380][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.908721][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2729.944953][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2729.986820][ T5022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2730.003015][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2730.041588][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2730.072770][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2730.100592][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2730.131918][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2730.163870][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2730.196943][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2730.390419][ T5022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2730.402601][ T5022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.426422][ T5022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.749729][ T5022] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2730.933325][ T5022] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2731.087241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2731.117185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2733.470949][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2733.496597][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2733.549227][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2733.636636][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2733.660203][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2733.716952][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2737.377256][ T4390] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2738.755967][ T4390] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2738.849099][ T4390] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2738.917448][ T4390] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2739.587999][ T5517] input: syz0 as /devices/virtual/input/input104 [ 2739.795595][ T26] audit: type=1326 audit(1738236249.767:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2739.929871][ T26] audit: type=1326 audit(1738236249.767:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2740.134678][ T26] audit: type=1326 audit(1738236249.767:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2740.205532][ T5530] loop1: detected capacity change from 0 to 2048 [ 2740.440900][ T26] audit: type=1326 audit(1738236249.767:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2741.614743][ T9680] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2741.688683][ T9680] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2741.821136][ T5530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2741.862363][ T2207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2741.870764][ T2207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2741.881092][ T2207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2741.888708][ T2207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2741.905312][ T26] audit: type=1326 audit(1738236249.767:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2741.948682][ T26] audit: type=1326 audit(1738236249.767:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2742.002141][ T5530] rdma_rxe: rxe_register_device failed with error -23 [ 2742.083855][ T26] audit: type=1326 audit(1738236249.767:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2742.192954][ T5530] rdma_rxe: failed to add lo [ 2742.234401][ T26] audit: type=1326 audit(1738236249.767:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2743.421966][ T26] audit: type=1326 audit(1738236249.767:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2743.451675][ T26] audit: type=1326 audit(1738236249.767:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5524 comm="syz.1.7598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b798cda9 code=0x7ffc0000 [ 2743.494060][T32051] EXT4-fs (loop1): unmounting filesystem. [ 2743.561866][ T5541] lo speed is unknown, defaulting to 1000 [ 2744.162370][ T2207] Bluetooth: hci4: command 0x0409 tx timeout [ 2744.873296][ T5554] loop3: detected capacity change from 0 to 8192 [ 2745.114839][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 2745.114855][ T26] audit: type=1326 audit(1738236255.087:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2745.194745][ T4390] device hsr_slave_0 left promiscuous mode [ 2745.222023][ T4390] device hsr_slave_1 left promiscuous mode [ 2745.257805][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2745.293884][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2745.342173][ T26] audit: type=1326 audit(1738236255.127:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2745.363530][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2745.372304][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2745.380630][ T4390] device bridge_slave_1 left promiscuous mode [ 2745.396482][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 2745.408897][ T26] audit: type=1326 audit(1738236255.127:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2747.735969][ T2207] Bluetooth: hci4: command 0x041b tx timeout [ 2747.807942][ T4390] device bridge_slave_0 left promiscuous mode [ 2747.935775][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 2747.943726][ T26] audit: type=1326 audit(1738236255.127:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2748.058886][ T26] audit: type=1326 audit(1738236255.127:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2748.181129][ T4390] device veth1_macvtap left promiscuous mode [ 2748.192302][ T4390] device veth0_macvtap left promiscuous mode [ 2748.199285][ T4390] device veth1_vlan left promiscuous mode [ 2748.205328][ T4390] device veth0_vlan left promiscuous mode [ 2748.207727][ T26] audit: type=1326 audit(1738236255.137:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2748.270771][ T26] audit: type=1326 audit(1738236255.137:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2748.396511][ T26] audit: type=1326 audit(1738236255.137:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2748.438073][ T26] audit: type=1326 audit(1738236255.137:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2748.470183][ T26] audit: type=1326 audit(1738236255.137:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5577 comm="syz.4.7611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d30b8cda9 code=0x7ffc0000 [ 2749.687627][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 2749.760398][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 2749.772371][ T2207] Bluetooth: hci4: command 0x040f tx timeout [ 2749.838073][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2749.890450][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2750.610073][ T4390] bond0 (unregistering): Released all slaves [ 2751.492329][ T5630] syz.0.7623[5630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2751.492423][ T5630] syz.0.7623[5630] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2751.862071][ T2207] Bluetooth: hci4: command 0x0419 tx timeout [ 2752.853167][ T5608] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2752.956550][ T5608] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2753.252185][ T2207] Bluetooth: hci0: command 0x0c1a tx timeout [ 2753.292031][ T5608] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 2753.341353][ T5608] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2753.400991][ T5608] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2753.420788][ T5608] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 2753.440682][ T5608] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2753.460850][ T5608] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2753.481041][ T5608] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 2753.498261][ T5608] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2753.515246][ T5608] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2753.524825][ T5608] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 2753.541491][ T5608] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2753.548078][ T5608] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2753.558787][ T5608] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 2753.955900][ T5541] chnl_net:caif_netlink_parms(): no params data found [ 2754.037643][T30703] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2755.270365][T30703] usb 5-1: Using ep0 maxpacket: 32 [ 2755.303563][ T2207] Bluetooth: hci0: command 0x0406 tx timeout [ 2755.376549][ T2207] Bluetooth: hci2: command 0x0c1a tx timeout [ 2755.477550][ T4252] Bluetooth: hci1: command 0x0c1a tx timeout [ 2755.542258][ T9680] Bluetooth: hci3: command 0x0c1a tx timeout [ 2755.611933][ T9680] Bluetooth: hci4: command 0x0c1a tx timeout [ 2756.116792][T30703] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2756.190898][T30703] usb 5-1: config 0 has no interface number 0 [ 2756.197075][T30703] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2756.208036][T30703] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2756.217878][T30703] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2756.227729][T30703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2756.237500][T30703] usb 5-1: config 0 descriptor?? [ 2756.277504][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2756.304077][ T5679] loop3: detected capacity change from 0 to 164 [ 2756.320599][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2756.339508][ T5541] device bridge_slave_0 entered promiscuous mode [ 2756.393146][ T5679] Unable to read rock-ridge attributes [ 2756.406447][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 2756.436332][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2756.486137][ T5541] device bridge_slave_1 entered promiscuous mode [ 2756.502440][T30703] usbhid 5-1:0.1: can't add hid device: -71 [ 2756.511956][T30703] usbhid: probe of 5-1:0.1 failed with error -71 [ 2756.550006][T30703] usb 5-1: USB disconnect, device number 35 [ 2756.596430][ T5541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2756.640855][ T5541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2756.721250][ T5693] hub 1-0:1.0: USB hub found [ 2756.774324][ T5693] hub 1-0:1.0: 1 port detected [ 2756.815489][ T5541] team0: Port device team_slave_0 added [ 2756.880116][ T5541] team0: Port device team_slave_1 added [ 2757.247071][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2757.432472][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2758.758619][ T2207] Bluetooth: hci2: command 0x0406 tx timeout [ 2758.787042][ T2207] Bluetooth: hci3: command 0x0406 tx timeout [ 2758.852426][ T9680] Bluetooth: hci1: command 0x0406 tx timeout [ 2758.852500][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 2760.096445][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2760.114607][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2760.215086][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2760.241756][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2760.463552][ T5726] syz.4.7646[5726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2760.463647][ T5726] syz.4.7646[5726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2760.556159][ T5731] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 2760.603157][ T5541] device hsr_slave_0 entered promiscuous mode [ 2760.636901][ T5541] device hsr_slave_1 entered promiscuous mode [ 2760.662530][ T5541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2760.670118][ T5541] Cannot create hsr debugfs directory [ 2763.252144][ T5784] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.7661' sets config #1 [ 2763.270074][ T5541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2763.309983][ T5541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2763.347495][ T5541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2763.393241][ T5541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2763.670995][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2763.714993][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2763.754390][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2763.785598][ T5541] 8021q: adding VLAN 0 to HW filter on device team0 [ 2763.802044][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2763.823779][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2763.838061][ T5722] bridge0: port 1(bridge_slave_0) entered blocking state [ 2763.845234][ T5722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2763.918762][ T5541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2763.949774][ T5541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2764.033703][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2764.049362][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2764.094876][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2764.112934][ T5722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2764.120088][ T5722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2764.136585][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2764.145539][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2764.190206][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2764.236868][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2764.261444][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2764.305569][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2764.328954][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2764.340449][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2764.354316][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2764.366405][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2764.384021][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2764.448481][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2764.456297][T30703] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2765.173856][T30703] usb 4-1: Using ep0 maxpacket: 8 [ 2765.183937][T30703] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 2765.196575][T30703] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2765.209338][T30703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2765.220570][T30703] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2765.235459][ T5825] netlink: 'syz.4.7671': attribute type 1 has an invalid length. [ 2765.252346][T30703] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2765.283064][ T5830] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.7673' sets config #1 [ 2765.284675][ T5825] device bond12 entered promiscuous mode [ 2765.305900][T30703] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2765.325304][ T5825] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2765.335373][T30703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2765.578718][T30703] usb 4-1: usb_control_msg returned -32 [ 2765.585172][T30703] usbtmc 4-1:16.0: can't read capabilities [ 2765.608724][ T5834] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2765.616940][ T5834] bond12: (slave bond13): making interface the new active one [ 2765.624573][ T5834] device bond13 entered promiscuous mode [ 2765.634286][ T5834] bond12: (slave bond13): Enslaving as an active interface with an up link [ 2765.675525][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 2765.738547][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2765.762676][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2765.789263][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2765.800371][ T5814] usbtmc 4-1:16.0: Unable to send data, error -71 [ 2765.805384][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2765.815223][ T3145] usb 4-1: USB disconnect, device number 41 [ 2765.908591][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2765.923618][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2766.008881][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2766.017848][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2766.066970][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2766.101431][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2766.136364][ T5541] device veth0_vlan entered promiscuous mode [ 2766.180416][ T5541] device veth1_vlan entered promiscuous mode [ 2766.280566][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2766.308284][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2766.327881][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2766.348330][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2766.373924][ T5541] device veth0_macvtap entered promiscuous mode [ 2766.392329][T16281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2766.403495][ T5541] device veth1_macvtap entered promiscuous mode [ 2766.448179][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.472248][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.509269][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2766.540175][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.563614][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2766.581776][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2766.591195][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2766.616745][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.644172][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.661188][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2766.677634][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2766.689237][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2766.714705][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2766.874554][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2766.935647][ T5541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.951715][ T5541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.977314][ T5541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2766.999875][ T5541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2767.262266][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2767.310981][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2767.342806][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2767.359947][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2767.385526][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2767.423290][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2768.004907][ T5885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7684'. [ 2768.198008][ T5899] netlink: 'syz.3.7688': attribute type 1 has an invalid length. [ 2768.287419][ T5899] device bond5 entered promiscuous mode [ 2768.296308][ T5899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2768.367898][ T5901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2768.417535][ T5901] bond5: (slave bond6): making interface the new active one [ 2768.427367][ T5901] device bond6 entered promiscuous mode [ 2768.517255][ T5901] bond5: (slave bond6): Enslaving as an active interface with an up link [ 2768.531076][ T5722] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 2768.852073][T19816] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2769.181910][T19816] usb 1-1: Using ep0 maxpacket: 8 [ 2769.207917][T19816] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 2769.231120][T19816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2769.268402][T19816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2769.281222][T19816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2769.291528][T19816] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2769.320511][T19816] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2769.335270][T19816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2769.571576][T19816] usb 1-1: usb_control_msg returned -32 [ 2769.577520][T19816] usbtmc 1-1:16.0: can't read capabilities [ 2769.785428][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2769.795355][ T5912] usbtmc 1-1:16.0: Unable to send data, error -71 [ 2769.867312][T31176] usb 1-1: USB disconnect, device number 49 [ 2770.017743][ T4421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2770.225521][ T4421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2770.440019][ T4421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2770.592523][ T4421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2771.791500][ T4421] device hsr_slave_0 left promiscuous mode [ 2771.798675][ T4421] device hsr_slave_1 left promiscuous mode [ 2771.811664][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2771.819384][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2771.832237][ T4421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2771.839641][ T4421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2771.847620][ T4421] device bridge_slave_1 left promiscuous mode [ 2771.854109][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 2771.896845][ T4421] device bridge_slave_0 left promiscuous mode [ 2771.922765][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 2772.094931][ T4421] device veth1_macvtap left promiscuous mode [ 2772.100970][ T4421] device veth0_macvtap left promiscuous mode [ 2772.107112][ T4421] device veth1_vlan left promiscuous mode [ 2772.145445][ T4421] device veth0_vlan left promiscuous mode [ 2774.175536][ T2207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2774.189242][ T2207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2774.198148][ T2207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2774.208008][ T2207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2774.216513][ T2207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2774.234900][ T2207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2774.579310][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.589272][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2774.707402][ T4421] team0 (unregistering): Port device team_slave_1 removed [ 2774.743768][T19816] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2774.759565][ T4421] team0 (unregistering): Port device team_slave_0 removed [ 2774.799270][ T4421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2774.844159][ T4421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2774.937310][T19816] usb 4-1: Using ep0 maxpacket: 8 [ 2774.955253][T19816] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 2774.963447][T19816] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2774.979622][T19816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2774.989717][T19816] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2775.003081][T19816] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2775.016360][T19816] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2775.025527][T19816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2775.249208][T19816] usb 4-1: usb_control_msg returned -32 [ 2775.259256][T19816] usbtmc 4-1:16.0: can't read capabilities [ 2775.409983][ T4421] bond0 (unregistering): Released all slaves [ 2775.452781][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2775.462506][ T6044] usbtmc 4-1:16.0: Unable to send data, error -71 [ 2775.470188][T19816] usb 4-1: USB disconnect, device number 42 [ 2775.502369][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7698'. [ 2775.514294][ T6031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7702'. [ 2775.590721][ T6037] lo speed is unknown, defaulting to 1000 [ 2776.332159][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 2776.809912][ T6081] loop3: detected capacity change from 0 to 2048 [ 2776.893856][ T6037] chnl_net:caif_netlink_parms(): no params data found [ 2778.411944][ T2207] Bluetooth: hci4: command 0x041b tx timeout [ 2778.452662][ T6081] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2778.536626][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 2778.536637][ T26] audit: type=1800 audit(1738236288.507:400): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7715" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 2778.756442][ T6037] bridge0: port 1(bridge_slave_0) entered blocking state [ 2778.783102][ T6037] bridge0: port 1(bridge_slave_0) entered disabled state [ 2778.792802][ T6037] device bridge_slave_0 entered promiscuous mode [ 2778.801013][ T6037] bridge0: port 2(bridge_slave_1) entered blocking state [ 2778.801320][T30947] EXT4-fs (loop3): unmounting filesystem. [ 2778.849818][ T6037] bridge0: port 2(bridge_slave_1) entered disabled state [ 2778.891522][ T6037] device bridge_slave_1 entered promiscuous mode [ 2778.997632][ T6103] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7719'. [ 2779.008224][ T6105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7720'. [ 2779.074126][ T6037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2779.131240][ T6037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2779.274289][T30703] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2779.426382][ T6037] team0: Port device team_slave_0 added [ 2779.484363][ T6120] netlink: 'syz.3.7724': attribute type 39 has an invalid length. [ 2779.541904][T30703] usb 5-1: Using ep0 maxpacket: 8 [ 2779.565454][T30703] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 2779.573870][T30703] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2779.613852][ T6123] loop3: detected capacity change from 0 to 2048 [ 2779.652091][ T6123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2779.665938][ T6123] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.7724: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 2779.703442][ T6123] EXT4-fs (loop3): Remounting filesystem read-only [ 2779.734078][T30703] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2779.747256][T30703] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2779.758284][T30703] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2779.807174][T30703] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2779.817261][T30703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.906460][ T6037] team0: Port device team_slave_1 added [ 2779.957878][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2779.977255][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2780.036700][ T6037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2780.059840][T30703] usb 5-1: usb_control_msg returned -32 [ 2780.065622][T30703] usbtmc 5-1:16.0: can't read capabilities [ 2780.094980][ T6037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2780.110919][ T6037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2780.199840][ T6037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2780.269016][ T6037] device hsr_slave_0 entered promiscuous mode [ 2780.274708][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2780.285837][ T6111] usbtmc 5-1:16.0: Unable to send data, error -71 [ 2780.293285][T30703] usb 5-1: USB disconnect, device number 36 [ 2780.293391][ T6037] device hsr_slave_1 entered promiscuous mode [ 2780.315041][T30947] EXT4-fs (loop3): unmounting filesystem. [ 2780.320961][ T6037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2780.340263][ T6037] Cannot create hsr debugfs directory [ 2780.614408][ T2207] Bluetooth: hci4: command 0x040f tx timeout [ 2782.742154][ T2207] Bluetooth: hci4: command 0x0419 tx timeout [ 2783.566947][ T6166] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2784.051060][ T6171] loop1: detected capacity change from 0 to 2048 [ 2784.198565][ T6173] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7737'. [ 2784.268737][ T6171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2784.340631][ T26] audit: type=1800 audit(1738236294.307:401): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7735" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 2784.420495][ T6183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7736'. [ 2784.740045][T32051] EXT4-fs (loop1): unmounting filesystem. [ 2784.928679][ T6192] netlink: 'syz.1.7739': attribute type 39 has an invalid length. [ 2785.017942][ T6195] loop1: detected capacity change from 0 to 2048 [ 2785.243835][ T6195] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2786.552908][ T6195] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.7739: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 2786.594719][ T6195] EXT4-fs (loop1): Remounting filesystem read-only [ 2786.685204][ T6037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2786.695154][ T6037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2786.737726][ T6037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2786.943393][ T6037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2786.954940][T32051] EXT4-fs (loop1): unmounting filesystem. [ 2787.663908][ T5426] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2787.996445][ T5426] usb 5-1: Using ep0 maxpacket: 8 [ 2788.003431][ T5426] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 2788.041876][ T5426] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2788.492970][ T6037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2788.500470][ T5426] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2788.564187][ T5426] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2788.639647][ T5426] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2788.683945][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2788.740376][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2788.773810][ T5426] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2788.901253][ T6037] 8021q: adding VLAN 0 to HW filter on device team0 [ 2788.950764][ T5426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2789.078284][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2789.098576][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2789.168969][ T4390] bridge0: port 1(bridge_slave_0) entered blocking state [ 2789.176120][ T4390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2789.295707][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2789.342942][ T5426] usb 5-1: usb_control_msg returned -32 [ 2789.348624][ T5426] usbtmc 5-1:16.0: can't read capabilities [ 2789.362236][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2789.381105][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2789.403534][T11958] bridge0: port 2(bridge_slave_1) entered blocking state [ 2789.410647][T11958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2789.467874][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2789.498059][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2789.507444][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2789.556123][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2789.565726][ T6210] usbtmc 5-1:16.0: Unable to send data, error -71 [ 2789.572879][T19816] usb 5-1: USB disconnect, device number 37 [ 2789.623174][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2789.647413][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2789.683220][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2789.743601][ T6037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2789.832900][ T6037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2789.938059][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2790.017502][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2790.048293][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2790.078612][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2790.161359][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2790.180056][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7751'. [ 2790.197526][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2790.515328][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7753'. [ 2791.289555][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2791.308824][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2791.334179][ T6037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2791.361534][ T6277] netlink: 'syz.1.7755': attribute type 39 has an invalid length. [ 2791.405655][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2791.445295][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2791.508841][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2791.622717][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2791.674486][ T6037] device veth0_vlan entered promiscuous mode [ 2791.693166][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2791.720882][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2792.284352][ T6037] device veth1_vlan entered promiscuous mode [ 2792.299227][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2792.503180][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2792.532539][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2792.614819][ T6037] device veth0_macvtap entered promiscuous mode [ 2792.657894][ T6037] device veth1_macvtap entered promiscuous mode [ 2792.847260][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2792.966614][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.027687][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2793.099305][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.151382][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2793.167086][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2793.182497][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.192438][ T6037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2793.202999][ T6037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2793.223274][ T6037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2793.254664][ T6308] device dummy0 entered promiscuous mode [ 2793.292905][ T6308] device dummy0 left promiscuous mode [ 2793.403889][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2793.418958][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2793.430338][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2793.439468][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2793.463631][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2793.490847][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2793.523486][ T6037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2793.549684][ T6037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2793.571934][ T6037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2793.596881][ T6037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2793.662189][T31176] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2793.790425][ T4392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2793.834016][T28953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2793.848119][ T4392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2793.852042][T31176] usb 2-1: Using ep0 maxpacket: 8 [ 2793.879645][T31176] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 2793.888604][T28953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2793.909949][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2793.935972][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2793.944561][T31176] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2793.995477][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7765'. [ 2794.029267][T31176] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2794.071269][T31176] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2794.132141][T31176] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2794.180774][T31176] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2794.223579][T31176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2794.472077][T31176] usb 2-1: usb_control_msg returned -32 [ 2794.479493][T31176] usbtmc 2-1:16.0: can't read capabilities [ 2794.681437][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2794.690848][ T6315] usbtmc 2-1:16.0: Unable to send data, error -71 [ 2794.701743][T10638] usb 2-1: USB disconnect, device number 23 [ 2794.860218][T28953] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.086819][T28953] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.209632][T28953] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.323692][T28953] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.574985][T28953] device hsr_slave_0 left promiscuous mode [ 2796.581415][T28953] device hsr_slave_1 left promiscuous mode [ 2796.591001][T28953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2796.613203][T28953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2796.624639][T28953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2796.632211][T28953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2796.639906][T28953] device bridge_slave_1 left promiscuous mode [ 2796.646331][T28953] bridge0: port 2(bridge_slave_1) entered disabled state [ 2796.656612][T28953] device bridge_slave_0 left promiscuous mode [ 2796.663280][T28953] bridge0: port 1(bridge_slave_0) entered disabled state [ 2796.699429][T28953] device veth1_macvtap left promiscuous mode [ 2796.705648][T28953] device veth0_macvtap left promiscuous mode [ 2796.711768][T28953] device veth1_vlan left promiscuous mode [ 2796.717888][T28953] device veth0_vlan left promiscuous mode [ 2797.322568][ T6413] loop4: detected capacity change from 0 to 4096 [ 2797.441197][ T6413] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2798.833601][T29661] EXT4-fs (loop4): unmounting filesystem. [ 2798.889630][ T4252] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2798.899995][ T4252] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2798.910707][ T4252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2798.940620][ T4252] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2798.949638][ T4252] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2798.958552][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2798.998288][T28953] team0 (unregistering): Port device team_slave_1 removed [ 2799.076864][T28953] team0 (unregistering): Port device team_slave_0 removed [ 2799.156988][T28953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2799.239350][T28953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2799.727674][T28953] bond0 (unregistering): Released all slaves [ 2799.829139][ T6416] netlink: 'syz.1.7767': attribute type 39 has an invalid length. [ 2799.870382][ T6425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7766'. [ 2800.185721][ T6434] lo speed is unknown, defaulting to 1000 [ 2801.025836][ T6466] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2801.253500][ T2207] Bluetooth: hci4: command 0x0409 tx timeout [ 2801.819225][ T6434] chnl_net:caif_netlink_parms(): no params data found [ 2801.942527][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7778'. [ 2802.139152][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2802.193349][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2802.210732][ T6434] device bridge_slave_0 entered promiscuous mode [ 2802.231905][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 2802.251162][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 2802.270825][ T6434] device bridge_slave_1 entered promiscuous mode [ 2802.345002][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2802.391129][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2802.496832][ T6434] team0: Port device team_slave_0 added [ 2802.555137][ T6434] team0: Port device team_slave_1 added [ 2802.795222][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2802.815456][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.292215][ T4252] Bluetooth: hci4: command 0x041b tx timeout [ 2803.690880][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2803.725803][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2803.753272][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2803.824680][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2804.118717][ T6434] device hsr_slave_0 entered promiscuous mode [ 2804.771685][ T6434] device hsr_slave_1 entered promiscuous mode [ 2804.778999][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2804.786822][ T6434] Cannot create hsr debugfs directory [ 2804.972018][ T6511] netlink: 'syz.0.7785': attribute type 39 has an invalid length. [ 2805.371977][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 2805.472368][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7786'. [ 2806.031892][ T6538] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2806.733583][ T6533] input: syz0 as /devices/virtual/input/input105 [ 2807.462330][ T4252] Bluetooth: hci4: command 0x0419 tx timeout [ 2809.779965][ T6576] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2809.997314][ T6583] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7803'. [ 2810.590599][T30703] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2810.851949][T30703] usb 4-1: Using ep0 maxpacket: 32 [ 2810.865307][T30703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2810.875585][T30703] usb 4-1: config 0 has no interfaces? [ 2810.881280][T30703] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2811.268665][T30703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2811.385499][T30703] usb 4-1: config 0 descriptor?? [ 2811.490368][ T6434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2811.535053][ T6434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2811.575336][ T6434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2811.758337][ T6434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2811.994158][ T6595] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2812.718764][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2812.790792][T28953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2812.818768][T28953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2812.862307][ T6434] 8021q: adding VLAN 0 to HW filter on device team0 [ 2812.953177][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2812.963964][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2812.973441][ T1901] bridge0: port 1(bridge_slave_0) entered blocking state [ 2812.980540][ T1901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2812.993138][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2813.049631][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2813.071017][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2813.126175][ T6632] input: syz0 as /devices/virtual/input/input106 [ 2813.136908][ T1901] bridge0: port 2(bridge_slave_1) entered blocking state [ 2813.144025][ T1901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2813.157553][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2813.235911][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2813.297330][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2813.321717][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2813.341435][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2813.452873][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2813.470885][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2813.509007][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2813.581265][ T6434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2813.650308][ T6434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2813.679579][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2813.726309][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2813.918534][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2813.952835][T30703] usb 4-1: USB disconnect, device number 43 [ 2815.622612][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2815.635421][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2815.725493][T11958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2815.830381][ T6678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7819'. [ 2815.845178][T28953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2816.346138][T28953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2817.524708][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2817.577981][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2817.592685][ T6434] device veth0_vlan entered promiscuous mode [ 2817.601348][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2817.717661][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2817.735494][ T6434] device veth1_vlan entered promiscuous mode [ 2817.882469][ T6434] device veth0_macvtap entered promiscuous mode [ 2817.893347][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2817.926472][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2817.970881][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2818.050093][ T6434] device veth1_macvtap entered promiscuous mode [ 2818.150595][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.171968][T11017] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2818.206360][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2818.330200][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2818.472000][T11017] usb 4-1: Using ep0 maxpacket: 32 [ 2818.559523][T11017] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2818.984084][T11017] usb 4-1: config 0 has no interfaces? [ 2819.068047][T11017] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2819.087435][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.097546][T11017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2819.126435][T11017] usb 4-1: config 0 descriptor?? [ 2819.135133][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2819.224917][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2819.233632][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2819.242954][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2819.267324][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2819.317695][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.331617][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2819.446953][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2819.460757][ T6704] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2819.473372][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2819.477616][T31176] usb 4-1: USB disconnect, device number 44 [ 2819.486038][ T6434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.496870][ T6434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.542138][ T6434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.561115][ T6434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2819.579103][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2819.592699][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2820.552379][T32635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2820.565106][T32635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2820.611385][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2820.657004][T28953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2820.708221][T28953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2820.769424][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2820.883197][ T6752] device dummy0 entered promiscuous mode [ 2820.932662][ T6752] device dummy0 left promiscuous mode [ 2823.335623][ T1901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.406738][ T6760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7839'. [ 2823.742701][ T1901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.823670][ T1901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2823.918129][ T1901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2825.120680][ T1901] device hsr_slave_0 left promiscuous mode [ 2825.127271][ T1901] device hsr_slave_1 left promiscuous mode [ 2825.136455][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2825.144353][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2825.157066][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2825.165067][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2825.175748][ T1901] device bridge_slave_1 left promiscuous mode [ 2825.182268][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2825.190928][ T1901] device bridge_slave_0 left promiscuous mode [ 2825.199926][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2825.247686][ T1901] device veth1_macvtap left promiscuous mode [ 2825.261308][ T1901] device veth0_macvtap left promiscuous mode [ 2825.267847][ T1901] device veth1_vlan left promiscuous mode [ 2825.278955][ T1901] device veth0_vlan left promiscuous mode [ 2826.090212][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 2826.092012][T10638] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2826.144124][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 2826.209439][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2826.249606][ T2207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2826.276688][ T2207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2826.287739][ T2207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2826.295083][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2826.304242][ T2207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2826.311780][ T2207] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2826.312249][T10638] usb 4-1: Using ep0 maxpacket: 32 [ 2826.333668][ T2207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2826.378671][T10638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2826.390193][T10638] usb 4-1: config 0 has no interfaces? [ 2826.396116][T10638] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2826.405531][T10638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2826.420459][T10638] usb 4-1: config 0 descriptor?? [ 2826.817272][ T6855] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2826.832656][T31176] usb 4-1: USB disconnect, device number 45 [ 2826.972988][ T1901] bond0 (unregistering): Released all slaves [ 2827.062325][ T6852] netlink: 'syz.1.7844': attribute type 1 has an invalid length. [ 2827.227764][ T6864] lo speed is unknown, defaulting to 1000 [ 2827.584000][ T6879] device dummy0 entered promiscuous mode [ 2827.612094][ T6879] device dummy0 left promiscuous mode [ 2828.426201][ T4252] Bluetooth: hci4: command 0x0409 tx timeout [ 2830.409449][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 2830.492157][ T2207] Bluetooth: hci4: command 0x041b tx timeout [ 2831.582697][ T6932] netlink: 'syz.1.7862': attribute type 1 has an invalid length. [ 2831.616819][ T6932] device bond1 entered promiscuous mode [ 2831.636714][ T6932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2831.771194][ T6937] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2831.783025][ T6937] bond1: (slave bond2): making interface the new active one [ 2831.837043][ T6937] device bond2 entered promiscuous mode [ 2831.857603][ T6937] bond1: (slave bond2): Enslaving as an active interface with an up link [ 2831.906694][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 2831.949264][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 2831.983111][ T6864] device bridge_slave_0 entered promiscuous mode [ 2831.997416][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 2832.069665][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 2832.104509][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 2832.148606][ T6864] device bridge_slave_1 entered promiscuous mode [ 2833.579865][ T4252] Bluetooth: hci4: command 0x040f tx timeout [ 2833.609785][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2833.647845][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2833.742226][ T6958] netlink: 'syz.1.7870': attribute type 39 has an invalid length. [ 2833.816648][ T6964] loop1: detected capacity change from 0 to 2048 [ 2834.034421][ T6964] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2834.118300][ T6958] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.7870: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 2834.207592][ T6864] team0: Port device team_slave_0 added [ 2834.280046][ T6864] team0: Port device team_slave_1 added [ 2834.286560][ T6958] EXT4-fs (loop1): Remounting filesystem read-only [ 2834.478408][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2834.528843][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2834.570005][T32051] EXT4-fs (loop1): unmounting filesystem. [ 2834.634467][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2834.661562][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2834.674007][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2834.789387][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2835.205013][ T6864] device hsr_slave_0 entered promiscuous mode [ 2835.245995][ T6864] device hsr_slave_1 entered promiscuous mode [ 2835.311569][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2835.353248][ T6864] Cannot create hsr debugfs directory [ 2835.612001][ T2207] Bluetooth: hci4: command 0x0419 tx timeout [ 2836.023821][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.030177][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.104470][ T7021] device dummy0 entered promiscuous mode [ 2837.146396][ T7021] device dummy0 left promiscuous mode [ 2838.360152][ T6864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2838.396059][ T6864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2838.421613][ T6864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2838.545424][ T6864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2838.631737][ T7040] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2839.725015][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2839.763393][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2839.812807][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2839.849038][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 2839.920719][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2839.931544][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2839.940392][ T1025] bridge0: port 1(bridge_slave_0) entered blocking state [ 2839.947540][ T1025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2839.956656][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2840.015176][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2840.035300][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2840.189803][ T1025] bridge0: port 2(bridge_slave_1) entered blocking state [ 2840.197028][ T1025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2840.976025][T29793] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2841.171879][T29793] usb 1-1: Using ep0 maxpacket: 32 [ 2841.287844][T29793] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2841.310815][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2841.320180][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2841.341659][T29793] usb 1-1: config 0 has no interfaces? [ 2841.352982][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2841.368547][T29793] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2841.479178][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2841.508862][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2841.522025][T29793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2842.652638][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2842.739025][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2842.759158][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2842.779107][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2842.898236][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2842.915275][ T6864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2842.952947][T29793] usb 1-1: config 0 descriptor?? [ 2842.982634][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2843.013009][ T1901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2843.048424][T31176] usb 1-1: USB disconnect, device number 50 [ 2844.501581][ T7091] loop1: detected capacity change from 0 to 4096 [ 2844.606806][ T7098] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2845.296846][ T7091] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2845.329408][ T1008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2845.352086][ T1008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2845.426387][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2845.644730][T32051] EXT4-fs (loop1): unmounting filesystem. [ 2845.667181][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2845.731441][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2845.756843][ T6864] device veth0_vlan entered promiscuous mode [ 2845.775144][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2845.788374][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2845.915553][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2845.953881][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2846.710601][ T6864] device veth1_vlan entered promiscuous mode [ 2846.732669][ T7129] input: syz0 as /devices/virtual/input/input107 [ 2846.740251][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2846.903627][ T6864] device veth0_macvtap entered promiscuous mode [ 2847.017504][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2847.026392][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2847.041487][T32635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2847.054816][ T6864] device veth1_macvtap entered promiscuous mode [ 2847.131121][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2847.214819][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2847.375456][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2848.546414][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2848.593076][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2848.632788][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2848.713941][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2848.739456][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2848.760040][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2848.792016][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2848.853699][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2848.926050][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2848.952739][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2848.991526][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2849.010868][T25355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2849.040022][ T6864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.059307][ T6864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.070510][ T6864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.097464][ T6864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2849.140481][ T7153] device dummy0 entered promiscuous mode [ 2849.148179][ T7153] device dummy0 left promiscuous mode [ 2849.264651][ T7164] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2850.135980][T11958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2850.149672][T11958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2850.194184][ T1025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2850.210064][ T7169] loop1: detected capacity change from 0 to 4096 [ 2850.230151][T11958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2850.250469][T11958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2850.305264][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2850.374395][ T7169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2851.697904][ T7187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7919'. [ 2852.021003][T32051] EXT4-fs (loop1): unmounting filesystem. [ 2852.045770][ T1025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 132: Operation not possible due to RF-kill) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: ebtable checkpoint: socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) (errno 1: Operation not permitted) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=2 req=6256 state=3 status=67 (errno 11: Resource temporarily unavailable) [ 2852.339435][ T1025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.499922][ T1025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2852.823660][ T1025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2854.674384][ T1025] device hsr_slave_0 left promiscuous mode [ 2854.680850][ T1025] device hsr_slave_1 left promiscuous mode [ 2854.687667][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2854.695470][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2854.703509][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2854.710898][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2854.719129][ T1025] device bridge_slave_1 left promiscuous mode [ 2854.729617][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 2854.738597][ T1025] device bridge_slave_0 left promiscuous mode [ 2854.745133][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2854.778620][ T1025] device veth1_macvtap left promiscuous mode [ 2854.784732][ T1025] device veth0_macvtap left promiscuous mode [ 2854.791179][ T1025] device veth1_vlan left promiscuous mode [ 2854.797295][ T1025] device veth0_vlan left promiscuous mode [ 2855.224541][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 2855.265071][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 2855.306320][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2855.347926][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2855.797139][ T1025] bond0 (unregistering): Released all slaves [ 2856.423520][ T1025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.499231][ T1025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.549514][ T1025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.645651][ T1025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.830147][ T1025] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.905160][ T1025] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.974446][ T1025] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.044145][ T1025] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.191737][ T1025] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.267745][ T1025] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.343833][ T1025] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.403111][ T1025] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.557028][ T1025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.627565][ T1025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.694404][ T1025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2857.750047][ T1025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2860.358358][ T1025] device hsr_slave_0 left promiscuous mode [ 2860.365078][ T1025] device hsr_slave_1 left promiscuous mode [ 2860.372188][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2860.379598][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2860.387956][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2860.395694][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2860.406939][ T1025] device bridge_slave_1 left promiscuous mode [ 2860.413413][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.426557][ T1025] device bridge_slave_0 left promiscuous mode [ 2860.433075][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2860.450012][ T1025] device hsr_slave_0 left promiscuous mode [ 2860.456675][ T1025] device hsr_slave_1 left promiscuous mode [ 2860.468082][ T1025] device hsr_slave_0 left promiscuous mode [ 2860.474535][ T1025] device hsr_slave_1 left promiscuous mode [ 2860.487361][ T1025] device hsr_slave_0 left promiscuous mode [ 2860.495682][ T1025] device hsr_slave_1 left promiscuous mode [ 2860.504301][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2860.511709][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2860.519833][ T1025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2860.527524][ T1025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2860.537068][ T1025] device bridge_slave_1 left promiscuous mode [ 2860.543714][ T1025] bridge0: port 2(bridge_slave_1) entered disabled state [ 2860.552325][ T1025] device bridge_slave_0 left promiscuous mode [ 2860.558529][ T1025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2860.684778][ T1025] device veth1_macvtap left promiscuous mode [ 2860.690854][ T1025] device veth0_macvtap left promiscuous mode [ 2860.701118][ T1025] device veth1_vlan left promiscuous mode [ 2860.707109][ T1025] device veth0_vlan left promiscuous mode [ 2860.720235][ T1025] device veth0_macvtap left promiscuous mode [ 2860.726487][ T1025] device veth1_vlan left promiscuous mode [ 2860.738862][ T1025] device veth0_vlan left promiscuous mode [ 2860.746978][ T1025] device veth1_macvtap left promiscuous mode [ 2860.761382][ T1025] device veth0_macvtap left promiscuous mode [ 2860.767940][ T1025] device veth1_vlan left promiscuous mode [ 2860.778340][ T1025] device veth0_vlan left promiscuous mode [ 2860.785407][ T1025] device veth1_macvtap left promiscuous mode [ 2860.791405][ T1025] device veth0_macvtap left promiscuous mode [ 2860.800066][ T1025] device veth1_vlan left promiscuous mode [ 2860.805916][ T1025] device veth0_vlan left promiscuous mode [ 2861.001908][ T1025] infiniband sz1: set down [ 2861.204158][ T1025] bond3 (unregistering): (slave bond4): Releasing backup interface [ 2861.212263][ T1025] device bond4 left promiscuous mode [ 2861.219368][ T1025] bond4 (unregistering): Released all slaves [ 2861.345657][ T1025] bond3 (unregistering): Released all slaves [ 2861.473913][ T1025] bond1 (unregistering): (slave bond2): Releasing backup interface [ 2861.481897][ T1025] device bond2 left promiscuous mode [ 2861.488282][ T1025] bond2 (unregistering): Released all slaves [ 2861.614947][ T1025] bond1 (unregistering): Released all slaves [ 2861.964754][ T1025] team0 (unregistering): Port device team_slave_1 removed [ 2862.009791][ T1025] team0 (unregistering): Port device team_slave_0 removed [ 2862.050655][ T1025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2862.094274][ T1025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface