[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. 2020/10/20 13:13:35 fuzzer started 2020/10/20 13:13:36 dialing manager at 10.128.0.105:39075 2020/10/20 13:13:38 syscalls: 3433 2020/10/20 13:13:38 code coverage: enabled 2020/10/20 13:13:38 comparison tracing: enabled 2020/10/20 13:13:38 extra coverage: enabled 2020/10/20 13:13:38 setuid sandbox: enabled 2020/10/20 13:13:38 namespace sandbox: enabled 2020/10/20 13:13:38 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/20 13:13:38 fault injection: enabled 2020/10/20 13:13:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/20 13:13:38 net packet injection: enabled 2020/10/20 13:13:38 net device setup: enabled 2020/10/20 13:13:38 concurrency sanitizer: enabled 2020/10/20 13:13:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/20 13:13:38 USB emulation: enabled 2020/10/20 13:13:38 hci packet injection: enabled 2020/10/20 13:13:38 wifi device emulation: enabled 2020/10/20 13:13:41 suppressing KCSAN reports in functions: '__ext4_new_inode' 'n_tty_receive_buf_common' 'do_select' 'xas_find_marked' '__xa_clear_mark' 'snd_rawmidi_kernel_write1' 'do_nanosleep' '__io_cqring_fill_event' 'shmem_mknod' 'shmem_unlink' 'blk_mq_sched_dispatch_requests' 'step_into' '__add_to_page_cache_locked' 'ext4_mark_iloc_dirty' 'ext4_writepages' 'filemap_map_pages' 'dd_has_work' 'generic_write_end' 'do_signal_stop' 'expire_timers' 'xas_clear_mark' 'ext4_free_inode' 'alloc_pid' 'pcpu_alloc' 'ext4_free_inodes_count' 'snd_rawmidi_poll' '__delayacct_blkio_end' 'do_exit' 'blk_mq_rq_ctx_init' 'complete_signal' 'kcm_rfree' 13:14:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) 13:14:05 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_SET(0x0, 0x6, 0x0) 13:14:05 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @ramp}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)) write$evdev(r0, &(0x7f0000000040), 0x373) 13:14:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 13:14:05 executing program 4: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:05 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) syzkaller login: [ 61.551754][ T8713] IPVS: ftp: loaded support on port[0] = 21 [ 61.616721][ T8713] chnl_net:caif_netlink_parms(): no params data found [ 61.653517][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.660663][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.668353][ T8713] device bridge_slave_0 entered promiscuous mode [ 61.675788][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.682801][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.690246][ T8713] device bridge_slave_1 entered promiscuous mode [ 61.706346][ T8713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.716745][ T8713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.741859][ T8713] team0: Port device team_slave_0 added [ 61.749028][ T8713] team0: Port device team_slave_1 added [ 61.763664][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.771018][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.797224][ T8713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.809119][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.811258][ T8715] IPVS: ftp: loaded support on port[0] = 21 [ 61.816637][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.848040][ T8713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.885735][ T8713] device hsr_slave_0 entered promiscuous mode [ 61.898583][ T8713] device hsr_slave_1 entered promiscuous mode [ 61.922153][ T8717] IPVS: ftp: loaded support on port[0] = 21 [ 61.958272][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 62.056071][ T8719] IPVS: ftp: loaded support on port[0] = 21 [ 62.056699][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.089634][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.097411][ T8715] device bridge_slave_0 entered promiscuous mode [ 62.106229][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.113247][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.120780][ T8715] device bridge_slave_1 entered promiscuous mode [ 62.149697][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 62.159212][ T8713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.170527][ T8713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.186972][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.199093][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.208799][ T8713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.236330][ T8713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.263946][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.284078][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.291914][ T8717] device bridge_slave_0 entered promiscuous mode [ 62.306239][ T8715] team0: Port device team_slave_0 added [ 62.317371][ T8721] IPVS: ftp: loaded support on port[0] = 21 [ 62.327404][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.338912][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.346787][ T8717] device bridge_slave_1 entered promiscuous mode [ 62.362252][ T8715] team0: Port device team_slave_1 added [ 62.398748][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.405805][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.413068][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.420166][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.445167][ T8723] IPVS: ftp: loaded support on port[0] = 21 [ 62.455284][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 62.467482][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.474566][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.500562][ T8715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.515950][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.537750][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.546023][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.573173][ T8715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.585085][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.623588][ T8713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.631529][ T8717] team0: Port device team_slave_0 added [ 62.639741][ T8717] team0: Port device team_slave_1 added [ 62.663622][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.671515][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.680535][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 62.715218][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.722866][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.741076][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.749397][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.756820][ T8719] device bridge_slave_0 entered promiscuous mode [ 62.766343][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.773418][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.781911][ T8719] device bridge_slave_1 entered promiscuous mode [ 62.799014][ T8715] device hsr_slave_0 entered promiscuous mode [ 62.814672][ T8715] device hsr_slave_1 entered promiscuous mode [ 62.820919][ T8715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.828517][ T8715] Cannot create hsr debugfs directory [ 62.834110][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.841176][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.867093][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.878646][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.889930][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.903575][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 62.916223][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.923157][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.949167][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.964001][ T8713] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.982361][ T8719] team0: Port device team_slave_0 added [ 62.998820][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.007150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.016594][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.023594][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.039289][ T8719] team0: Port device team_slave_1 added [ 63.069226][ T8717] device hsr_slave_0 entered promiscuous mode [ 63.076089][ T8717] device hsr_slave_1 entered promiscuous mode [ 63.082414][ T8717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.090493][ T8717] Cannot create hsr debugfs directory [ 63.107581][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.119444][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.146037][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.157472][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.166872][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.175636][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.182695][ T8372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.190792][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.199779][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.230055][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.238906][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.264987][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.276096][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 63.286378][ T8715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.295078][ T8715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.305186][ T8715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.321469][ T8713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.332097][ T8713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.343371][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.350704][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.358306][ T8723] device bridge_slave_0 entered promiscuous mode [ 63.375848][ T8715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.384902][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.393078][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.401532][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.409910][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.418392][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.426562][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.434740][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.442803][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.451027][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.458894][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.471513][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.471521][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.471796][ T8723] device bridge_slave_1 entered promiscuous mode [ 63.489939][ T8719] device hsr_slave_0 entered promiscuous mode [ 63.504413][ T8719] device hsr_slave_1 entered promiscuous mode [ 63.510652][ T8719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.518678][ T8719] Cannot create hsr debugfs directory [ 63.553247][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.565612][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.580477][ T8713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.596997][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.605637][ T9445] Bluetooth: hci0: command 0x0409 tx timeout [ 63.611858][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.619746][ T8721] device bridge_slave_0 entered promiscuous mode [ 63.627599][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.634761][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.642116][ T8721] device bridge_slave_1 entered promiscuous mode [ 63.655390][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.662789][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.702785][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.713677][ T8717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.721847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.731159][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.744356][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.752352][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.762801][ T8723] team0: Port device team_slave_0 added [ 63.769685][ T8723] team0: Port device team_slave_1 added [ 63.776188][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.786807][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 63.793200][ T8717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.802429][ T8717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.814467][ T8713] device veth0_vlan entered promiscuous mode [ 63.824630][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.832127][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.850152][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.857168][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.883516][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.894445][ T8717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.922700][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.930395][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.933977][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 63.958895][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.982783][ T8721] team0: Port device team_slave_0 added [ 63.989950][ T8721] team0: Port device team_slave_1 added [ 63.997389][ T8719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.019762][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.028022][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.054051][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.066299][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.073234][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.099217][ T12] Bluetooth: hci3: command 0x0409 tx timeout [ 64.105252][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.116395][ T8719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.127879][ T8723] device hsr_slave_0 entered promiscuous mode [ 64.134668][ T8723] device hsr_slave_1 entered promiscuous mode [ 64.140942][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.148523][ T8723] Cannot create hsr debugfs directory [ 64.156760][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.165904][ T8713] device veth1_vlan entered promiscuous mode [ 64.177372][ T8719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.187035][ T8719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.223573][ T8721] device hsr_slave_0 entered promiscuous mode [ 64.230019][ T8721] device hsr_slave_1 entered promiscuous mode [ 64.237088][ T8721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.245732][ T8721] Cannot create hsr debugfs directory [ 64.258852][ T8715] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.270640][ T8713] device veth0_macvtap entered promiscuous mode [ 64.282014][ T8713] device veth1_macvtap entered promiscuous mode [ 64.289525][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.297750][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.306980][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.314619][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.322042][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.330698][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.333947][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 64.339266][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.352838][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.370258][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.400672][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.409593][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.415690][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 64.417994][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.430609][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.438644][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.447272][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.455813][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.463054][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.471307][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.480387][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.489469][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.505866][ T8713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.519600][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.535051][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.543794][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.552954][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.561695][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.570487][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.578138][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.586043][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.594873][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.603186][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.611668][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.620267][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.638340][ T8713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.656636][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.665075][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.673482][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.682418][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.692680][ T8713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.692696][ T8713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.692718][ T8713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.692734][ T8713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.697449][ T8721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.698990][ T8721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.700954][ T8715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.784069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.792422][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.801445][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.808479][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.816414][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.824879][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.833198][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.840234][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.847937][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.856556][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.865206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.873463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.882105][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.890414][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.898819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.907012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.915086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.923233][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.931413][ T8721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.940096][ T8721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.958147][ T8723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.968135][ T8717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.978073][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.986676][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.002193][ T8715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.009636][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.017655][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.031007][ T8723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 65.055708][ T8723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 65.067046][ T8723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 65.092012][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.124532][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.132895][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.141594][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.149271][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.165757][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.173575][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.194981][ T8719] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.202893][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.220054][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.227528][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.228042][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.237767][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.243414][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.257987][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.266311][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.274979][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.282713][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.291052][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.304552][ T8715] device veth0_vlan entered promiscuous mode [ 65.314569][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.322871][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.331591][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.338637][ T8372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.346328][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.354781][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.362867][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.369889][ T8372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.379239][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.398334][ T8715] device veth1_vlan entered promiscuous mode [ 65.425764][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.444330][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.452128][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.474280][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.482858][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.498025][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.519626][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.529949][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.539239][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.549910][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.558505][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.575478][ T8717] device veth0_vlan entered promiscuous mode [ 65.584181][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.593621][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.602161][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.610787][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.619222][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 13:14:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) [ 65.629146][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.636980][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.647988][ T8719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.683944][ T9604] Bluetooth: hci0: command 0x041b tx timeout [ 65.684393][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.714149][ T8715] device veth0_macvtap entered promiscuous mode [ 65.725271][ T8717] device veth1_vlan entered promiscuous mode [ 65.743468][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.751498][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.760071][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.768744][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.777093][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.785691][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 13:14:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) [ 65.794286][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.817766][ T8715] device veth1_macvtap entered promiscuous mode [ 65.832488][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.841208][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.855829][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.863161][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.884232][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.895051][ T8719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.907130][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.915394][ T8372] Bluetooth: hci1: command 0x041b tx timeout [ 65.926118][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.933573][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.942725][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.955744][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.964447][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.971455][ T9445] bridge0: port 1(bridge_slave_0) entered forwarding state 13:14:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) [ 65.989597][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 65.989602][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.990253][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.991376][ T8717] device veth0_macvtap entered promiscuous mode [ 65.993039][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 65.993044][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.993713][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.005780][ T8717] device veth1_macvtap entered promiscuous mode [ 66.013360][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 66.013364][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.013374][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 66.013411][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.015219][ T12] Bluetooth: hci2: command 0x041b tx timeout [ 66.024440][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.135956][ T8715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.146221][ T8715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.159946][ T8715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.171658][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 66.177698][ T8715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 13:14:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x18, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) [ 66.203776][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.211519][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.221186][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.234097][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.241894][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.250937][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.259811][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.268782][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.277514][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.286345][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.294630][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.301642][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.309664][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.318323][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.326571][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.333581][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.341430][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.349884][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.358378][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.366787][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.375058][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.382053][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.389700][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.398151][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.406997][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.413847][ T3956] Bluetooth: hci4: command 0x041b tx timeout [ 66.415583][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.429337][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.438041][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.445917][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.457740][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 66.468285][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.478257][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 66.489096][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.493891][ T3956] Bluetooth: hci5: command 0x041b tx timeout [ 66.499573][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.515653][ T8717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.524368][ T8717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.533105][ T8717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.541824][ T8717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 13:14:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x18, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) [ 66.559466][ T8719] device veth0_vlan entered promiscuous mode [ 66.567422][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.577612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.586818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.599321][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.608823][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.619503][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.628192][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.636789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.645245][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.652806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 13:14:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x18, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) [ 66.693595][ T8723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.710255][ T8723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.721467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.733208][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.743060][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.751694][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.761037][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.769564][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.780304][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.788789][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.797313][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.805844][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.814611][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.822505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:14:11 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x18, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) [ 66.843823][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.851247][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.887641][ T8719] device veth1_vlan entered promiscuous mode [ 66.900561][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.909125][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.929547][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.959044][ T8721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.976652][ T8721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.002016][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.023380][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.032598][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.036669][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.048081][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.064314][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.072623][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.091911][ T8719] device veth0_macvtap entered promiscuous mode [ 67.102377][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.112584][ T8719] device veth1_macvtap entered promiscuous mode [ 67.122111][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.133587][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.152308][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.153960][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.169075][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.177319][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.185270][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.193121][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.200806][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.212965][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 67.245402][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.263939][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 67.274869][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.285655][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 67.296499][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.307792][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.318819][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.331877][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 13:14:12 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_SET(0x0, 0x6, 0x0) [ 67.341059][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.353513][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 67.365163][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.375501][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 67.386362][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.396608][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 67.413847][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.434406][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.444151][ T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.450571][ T8719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.460940][ T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.471019][ T8719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.483470][ T8719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.497094][ T8719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.510777][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.521955][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.531665][T10061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.567007][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.576116][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.596158][ T8723] device veth0_vlan entered promiscuous mode 13:14:12 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @ramp}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)) write$evdev(r0, &(0x7f0000000040), 0x373) [ 67.627004][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.635665][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.655425][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.664339][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.681044][ T8723] device veth1_vlan entered promiscuous mode [ 67.704460][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.712067][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.721261][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.734125][ T3358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.742011][ T3358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.764623][ T8721] device veth0_vlan entered promiscuous mode [ 67.774093][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.781685][ T3956] Bluetooth: hci0: command 0x040f tx timeout [ 67.782081][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.796416][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.805080][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.828291][ T8721] device veth1_vlan entered promiscuous mode [ 67.849832][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.858059][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.867781][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.885174][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.892982][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.894049][ T8723] device veth0_macvtap entered promiscuous mode [ 67.907152][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.915536][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.924985][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.932789][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.948172][ T3956] Bluetooth: hci1: command 0x040f tx timeout [ 67.949889][ T8723] device veth1_macvtap entered promiscuous mode [ 67.974241][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.982644][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.991640][ T9445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 13:14:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 68.009382][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.024192][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.037094][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.048249][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.059477][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.072774][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.083881][ T12] Bluetooth: hci2: command 0x040f tx timeout [ 68.087001][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.101058][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.114613][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.126286][ T8721] device veth0_macvtap entered promiscuous mode [ 68.138677][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.149847][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.159047][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.171148][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.182500][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.192728][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.203822][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.213639][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.224661][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.234774][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.245644][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.254023][ T12] Bluetooth: hci3: command 0x040f tx timeout [ 68.257020][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.275777][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.284161][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.294229][ T8721] device veth1_macvtap entered promiscuous mode [ 68.301488][ T8723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.310506][ T8723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.319497][ T8723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.328520][ T8723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.354472][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.366118][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.376198][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.386662][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.396603][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.407096][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.417039][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.427466][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.437294][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.447766][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.458658][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.471274][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.479452][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.487881][ T3956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.498623][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.510308][ T12] Bluetooth: hci4: command 0x040f tx timeout [ 68.516538][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.526463][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.537199][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.546998][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.557454][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.567438][ T12] Bluetooth: hci5: command 0x040f tx timeout [ 68.573505][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.584000][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.593935][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.604414][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.616310][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.628162][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.636762][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.648168][ T8721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.657038][ T8721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.666021][ T8721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.674821][ T8721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.722468][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.743492][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.760937][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.778916][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.787091][ T262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.801337][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.818136][ T262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.823819][ T3358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.826196][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.840406][ T3358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.848674][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.857529][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:14:13 executing program 4: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) [ 68.943161][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:14:14 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_SET(0x0, 0x6, 0x0) 13:14:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x8, 0x0) 13:14:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @ramp}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)) write$evdev(r0, &(0x7f0000000040), 0x373) 13:14:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 13:14:14 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:14:14 executing program 4: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x4b, 0x2}, @ramp}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000240)) write$evdev(r0, &(0x7f0000000040), 0x373) 13:14:14 executing program 2: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 13:14:14 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgctl$IPC_SET(0x0, 0x6, 0x0) 13:14:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x8, 0x0) 13:14:14 executing program 1: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:14 executing program 4: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:14 executing program 3: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) [ 69.844365][ T12] Bluetooth: hci0: command 0x0419 tx timeout [ 69.865881][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:14:14 executing program 2: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x8, 0x0) [ 70.004417][ T3956] Bluetooth: hci1: command 0x0419 tx timeout [ 70.174378][ T12] Bluetooth: hci2: command 0x0419 tx timeout [ 70.325675][ T12] Bluetooth: hci3: command 0x0419 tx timeout 13:14:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:14:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x8, 0x0) 13:14:15 executing program 2: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:15 executing program 1: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 13:14:15 executing program 3: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) [ 70.563713][ T38] Bluetooth: hci4: command 0x0419 tx timeout 13:14:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) 13:14:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 70.643747][ T38] Bluetooth: hci5: command 0x0419 tx timeout 13:14:15 executing program 3: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x20, 0x4) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 13:14:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102400, 0x19000}], 0x2, 0x0, 0x0) 13:14:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) [ 70.739186][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 70.870300][ T29] audit: type=1804 audit(1603199655.573:2): pid=10353 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir230362472/syzkaller.GWO0ri/7/cgroup.controllers" dev="sda1" ino=15791 res=1 errno=0 [ 70.946129][ T29] audit: type=1804 audit(1603199655.653:3): pid=10358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir230362472/syzkaller.GWO0ri/7/memory.events" dev="sda1" ino=15782 res=1 errno=0 [ 71.013783][ T29] audit: type=1800 audit(1603199655.653:4): pid=10358 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=15782 res=0 errno=0 [ 71.095492][ T29] audit: type=1804 audit(1603199655.803:5): pid=10358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir230362472/syzkaller.GWO0ri/7/cgroup.controllers" dev="sda1" ino=15791 res=1 errno=0 [ 71.121294][ T29] audit: type=1804 audit(1603199655.803:6): pid=10358 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir230362472/syzkaller.GWO0ri/7/memory.events" dev="sda1" ino=15782 res=1 errno=0 [ 71.147950][ T29] audit: type=1800 audit(1603199655.803:7): pid=10358 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=15782 res=0 errno=0 13:14:16 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000001c14"], 0x24}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 13:14:16 executing program 1: epoll_create1(0x0) r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socket$packet(0x11, 0x2, 0x300) r3 = eventfd2(0x0, 0x0) r4 = dup(r3) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) io_uring_enter(r0, 0x3f, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) read$char_usb(r4, &(0x7f0000000240)=""/110, 0x6e) write$P9_ROPEN(r5, &(0x7f0000000200)={0x18}, 0x18) 13:14:16 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) 13:14:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) 13:14:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5f4502e3ff5b05007311"], 0xa) socket$packet(0x11, 0x3, 0x300) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) 13:14:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102400, 0x19000}], 0x2, 0x0, 0x0) 13:14:16 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) 13:14:16 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000000)) [ 71.537177][T10377] overlayfs: filesystem on './bus' not supported as upperdir 13:14:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) [ 71.586853][ T29] audit: type=1804 audit(1603199656.293:8): pid=10371 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir230362472/syzkaller.GWO0ri/8/cgroup.controllers" dev="sda1" ino=15799 res=1 errno=0 [ 71.612339][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 13:14:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102400, 0x19000}], 0x2, 0x0, 0x0) [ 71.660706][ T29] audit: type=1804 audit(1603199656.363:9): pid=10383 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir230362472/syzkaller.GWO0ri/8/memory.events" dev="sda1" ino=15798 res=1 errno=0 13:14:16 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) [ 71.736068][ T29] audit: type=1800 audit(1603199656.363:10): pid=10383 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=15798 res=0 errno=0 13:14:16 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) [ 71.897014][ T29] audit: type=1804 audit(1603199656.603:11): pid=10400 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir185416434/syzkaller.s1VYUW/16/cgroup.controllers" dev="sda1" ino=15825 res=1 errno=0 13:14:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5f4502e3ff5b05007311"], 0xa) socket$packet(0x11, 0x3, 0x300) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) 13:14:17 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) 13:14:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102400, 0x19000}], 0x2, 0x0, 0x0) 13:14:17 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8020001) 13:14:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102400, 0x19000}], 0x2, 0x0, 0x0) 13:14:17 executing program 5: syz_io_uring_setup(0x1f33, &(0x7f0000000040)={0x0, 0xf629}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 13:14:17 executing program 5: syz_io_uring_setup(0x1f33, &(0x7f0000000040)={0x0, 0xf629}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 13:14:17 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "188e"}, @main=@item_4={0x3, 0x0, 0xb, "dd2266d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "d2e0e9e7"}]}}, 0x0}, 0x0) 13:14:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x17, 0x6c0d, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 13:14:17 executing program 5: syz_io_uring_setup(0x1f33, &(0x7f0000000040)={0x0, 0xf629}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 13:14:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x17, 0x6c0d, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 13:14:17 executing program 5: syz_io_uring_setup(0x1f33, &(0x7f0000000040)={0x0, 0xf629}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) [ 72.894074][ T9604] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.173624][ T9604] usb 5-1: Using ep0 maxpacket: 16 13:14:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5f4502e3ff5b05007311"], 0xa) socket$packet(0x11, 0x3, 0x300) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) 13:14:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x17, 0x6c0d, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 13:14:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102400, 0x19000}], 0x2, 0x0, 0x0) 13:14:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/102400, 0x19000}], 0x2, 0x0, 0x0) 13:14:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x17, 0x6c0d, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 13:14:18 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x17, 0x6c0d, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 13:14:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x17, 0x6c0d, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) [ 73.324013][ T9604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.347315][ T9604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.394945][ T9604] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 73.413822][ T9604] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 73.424246][ T9604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.440597][ T9604] usb 5-1: config 0 descriptor?? [ 73.924608][ T9604] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 73.931884][ T9604] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 73.949468][ T9604] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 73.964657][ T9604] microsoft 0003:045E:07DA.0001: no inputs found [ 73.970985][ T9604] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 74.126649][ T8372] usb 5-1: USB disconnect, device number 2 [ 74.893591][ T38] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.133703][ T38] usb 5-1: Using ep0 maxpacket: 16 [ 75.253814][ T38] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.264732][ T38] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.274762][ T38] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.287568][ T38] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.296644][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.305403][ T38] usb 5-1: config 0 descriptor?? 13:14:20 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "188e"}, @main=@item_4={0x3, 0x0, 0xb, "dd2266d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "d2e0e9e7"}]}}, 0x0}, 0x0) 13:14:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x17, 0x6c0d, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 13:14:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07006706000002000000150300000ee60060bf050000000000004f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12feffffff8ecf264e0f8492b80482f48821a0d2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d04acd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d75ec88158f0200000000c8fb735fd552bdbcfdcc39598068551a7c291c3770e335c206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ce2ac16f64ea7b0ef3b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401c3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f9d2001e038451bb96589a7eab04871bc47207cd313f00000000000000407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a61434b0c94cce699452050000000000000026a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed729a2f95e1d6a1fc357b27990f51d33cd1bdf3dbcdf1c2cbb82ce8605abd094d3c495483186eef5cb247aa410dd86f07ea7ba5cded1f8fc47de13d2ba17b1e608cc3067aa5e2460900d472c275cc1dcd46a6321be36dd5342da5989dcc8c1e9ed32eb08bfbd9f7a4a1c63020a8d6d9662b3bc89140a6a36413f13d9536247ba66eb701a30744debfe69126c3f54250d7b3639e13f8df6ff262b2ce045b032abe1e891c50201e114e8c2ac0c274597e183953d823bc92acff3fbeb58c4ea7a9eb3c19ed601fe598919857bbdf0ce8de1a9cd06ce13c30f0d8b6e5a058066883c1581b544a0729c81d488ea9f64b6b33d7541da7e4a59ceb459ab6617e4"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:14:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x1, &(0x7f0000001a40)=@raw=[@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000001a80)='GPL\x00', 0x6, 0x90, &(0x7f0000001ac0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:14:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0xee01) 13:14:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="5f4502e3ff5b05007311"], 0xa) socket$packet(0x11, 0x3, 0x300) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) splice(r0, 0x0, r2, 0x0, 0xffff, 0x0) 13:14:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x7f}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 13:14:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x1, &(0x7f0000001a40)=@raw=[@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000001a80)='GPL\x00', 0x6, 0x90, &(0x7f0000001ac0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 75.643550][ T38] usbhid 5-1:0.0: can't add hid device: -71 [ 75.649530][ T38] usbhid: probe of 5-1:0.0 failed with error -71 13:14:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0xee01) 13:14:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x1, &(0x7f0000001a40)=@raw=[@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000001a80)='GPL\x00', 0x6, 0x90, &(0x7f0000001ac0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:14:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x7f}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) [ 75.715312][ T38] usb 5-1: USB disconnect, device number 3 13:14:20 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0xee01) [ 76.073557][ T38] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.313549][ T38] usb 5-1: Using ep0 maxpacket: 16 [ 76.434986][ T38] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.447183][ T38] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.457752][ T38] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 76.471153][ T38] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 76.480573][ T38] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.490470][ T38] usb 5-1: config 0 descriptor?? [ 76.974103][ T38] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 76.981408][ T38] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 76.997905][ T38] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 77.013431][ T38] microsoft 0003:045E:07DA.0002: no inputs found [ 77.023577][ T38] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 77.182357][ T38] usb 5-1: USB disconnect, device number 4 13:14:22 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "188e"}, @main=@item_4={0x3, 0x0, 0xb, "dd2266d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "d2e0e9e7"}]}}, 0x0}, 0x0) 13:14:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x7f}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 13:14:22 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0xee01) 13:14:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x18, 0x1, &(0x7f0000001a40)=@raw=[@jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000001a80)='GPL\x00', 0x6, 0x90, &(0x7f0000001ac0)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:14:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:14:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:14:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x7f}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 13:14:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0xee01) 13:14:22 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000c3060000000000f5000000000800120002000100000000000000000030006c000203009f060000000000adb20200000000152c000000000000000001020014bb000300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 13:14:22 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) 13:14:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0xee01) 13:14:22 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) [ 78.063503][ T3956] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.333485][ T3956] usb 5-1: Using ep0 maxpacket: 16 [ 78.483542][ T3956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.494601][ T3956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.504346][ T3956] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 78.517208][ T3956] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 78.526240][ T3956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.534999][ T3956] usb 5-1: config 0 descriptor?? [ 79.024069][ T3956] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 79.031451][ T3956] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 79.039334][ T3956] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 79.050753][ T3956] microsoft 0003:045E:07DA.0003: no inputs found [ 79.057136][ T3956] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 79.231639][ T3956] usb 5-1: USB disconnect, device number 5 13:14:24 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x0, "188e"}, @main=@item_4={0x3, 0x0, 0xb, "dd2266d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "d2e0e9e7"}]}}, 0x0}, 0x0) 13:14:24 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000c3060000000000f5000000000800120002000100000000000000000030006c000203009f060000000000adb20200000000152c000000000000000001020014bb000300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 13:14:24 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368b2264f9c504c9f1f65515b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioprio_get$uid(0x3, 0xee01) 13:14:24 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) 13:14:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:14:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:14:24 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) 13:14:24 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000c3060000000000f5000000000800120002000100000000000000000030006c000203009f060000000000adb20200000000152c000000000000000001020014bb000300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 13:14:24 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 13:14:24 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000c3060000000000f5000000000800120002000100000000000000000030006c000203009f060000000000adb20200000000152c000000000000000001020014bb000300000000000000000000030005000000000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000000c0), 0x4000676, 0x0) 13:14:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xf, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:14:24 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) [ 79.967983][T10690] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 80.009405][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.113454][ T9604] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 80.383428][ T9604] usb 5-1: Using ep0 maxpacket: 16 [ 80.523488][ T9604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.534469][ T9604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.545051][ T9604] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.558149][ T9604] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.567602][ T9604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.577900][ T9604] usb 5-1: config 0 descriptor?? [ 81.053868][ T9604] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 81.061174][ T9604] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 81.078153][ T9604] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 81.093921][ T9604] microsoft 0003:045E:07DA.0004: no inputs found [ 81.100253][ T9604] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 81.263020][ T3956] usb 5-1: USB disconnect, device number 6 13:14:26 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 13:14:26 executing program 5: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) 13:14:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xf, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:14:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:14:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 13:14:26 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0x300) 13:14:26 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000240)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 13:14:26 executing program 5: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) 13:14:26 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0x300) [ 81.834739][T10733] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 81.871318][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:14:26 executing program 2: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 13:14:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xf, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:14:26 executing program 5: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) 13:14:26 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0x300) [ 82.032558][T10749] mmap: syz-executor.2 (10749) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 82.032882][T10750] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 13:14:26 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0xffffffffffffffff, &(0x7f0000000000)=0x300) 13:14:26 executing program 5: msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5) [ 82.111226][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:14:27 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) write$binfmt_aout(r2, &(0x7f0000000100), 0x20) 13:14:27 executing program 2: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 13:14:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xf, 0x1, 'bond_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 13:14:27 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 13:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 13:14:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 13:14:27 executing program 2: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 82.634331][T10776] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 13:14:27 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) write$binfmt_aout(r2, &(0x7f0000000100), 0x20) [ 82.679394][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 13:14:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:27 executing program 4: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 13:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 13:14:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 2: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x10) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 13:14:27 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) write$binfmt_aout(r2, &(0x7f0000000100), 0x20) 13:14:27 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 13:14:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000001bff4)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) write$binfmt_aout(r2, &(0x7f0000000100), 0x20) 13:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x5}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 13:14:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:27 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) 13:14:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x214) 13:14:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:27 executing program 4: syz_mount_image$hfs(&(0x7f00000001c0)='hfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@file_umask={'file_umask', 0x3d, 0xdec0000000000000}}]}) 13:14:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x7000000, 0x0}}], 0x400000000000085, 0x0) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11) [ 83.312510][T10841] hfs: file_umask requires a value 13:14:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x214) 13:14:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) 13:14:28 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x214) [ 83.361569][T10841] hfs: unable to parse mount options 13:14:28 executing program 2: clone(0x200300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000001d0000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c0000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd21b1ef7a584cf1000000000000000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000285a5ad4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000180000000000000000000027327243426c7d2d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019d129f100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000002a5600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) 13:14:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4101, 0x1005}], 0x1) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x7ec0, 0x0}}], 0x344, 0x10122, 0x0) [ 83.444753][T10841] hfs: file_umask requires a value [ 83.460455][T10841] hfs: unable to parse mount options 13:14:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa04, {{0x6000000, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @dev}}}, 0x48) io_submit(r3, 0x2000000000000072, &(0x7f0000000080)) [ 83.546175][T10866] ebt_among: dst integrity fail: 200 [ 83.552203][T10865] ================================================================== [ 83.560264][T10865] BUG: KCSAN: data-race in futex_wait_queue_me / mm_update_next_owner [ 83.568376][T10865] [ 83.570680][T10865] read-write to 0xffff888016de0024 of 4 bytes by task 10863 on cpu 0: [ 83.578799][T10865] futex_wait_queue_me+0x198/0x240 [ 83.583880][T10865] futex_wait+0x145/0x390 [ 83.588178][T10865] do_futex+0x113c/0x2180 [ 83.592476][T10865] __se_sys_futex+0x26d/0x330 [ 83.597125][T10865] __x64_sys_futex+0x74/0x80 [ 83.601687][T10865] do_syscall_64+0x39/0x80 [ 83.606075][T10865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 83.611939][T10865] [ 83.614250][T10865] read to 0xffff888016de0024 of 4 bytes by task 10865 on cpu 1: [ 83.621859][T10865] mm_update_next_owner+0x1e9/0x4c0 [ 83.627042][T10865] exit_mm+0x2b5/0x320 [ 83.631092][T10865] do_exit+0x40e/0x1670 [ 83.635218][T10865] do_group_exit+0xc8/0x170 [ 83.639692][T10865] get_signal+0xf9b/0x1510 [ 83.644079][T10865] arch_do_signal+0x25/0x270 [ 83.648641][T10865] exit_to_user_mode_prepare+0x116/0x200 [ 83.654255][T10865] syscall_exit_to_user_mode+0x16/0x30 [ 83.659696][T10865] do_syscall_64+0x45/0x80 [ 83.664083][T10865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 83.669947][T10865] [ 83.672244][T10865] Reported by Kernel Concurrency Sanitizer on: [ 83.678368][T10865] CPU: 1 PID: 10865 Comm: syz-executor.0 Not tainted 5.9.0-syzkaller #0 [ 83.686658][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.696685][T10865] ================================================================== [ 83.704713][T10865] Kernel panic - not syncing: panic_on_warn set ... [ 83.711274][T10865] CPU: 1 PID: 10865 Comm: syz-executor.0 Not tainted 5.9.0-syzkaller #0 [ 83.719561][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.729582][T10865] Call Trace: [ 83.732848][T10865] dump_stack+0x10f/0x19d [ 83.737152][T10865] panic+0x207/0x64a [ 83.741022][T10865] ? vprintk_emit+0x3f1/0x490 [ 83.745671][T10865] kcsan_report+0x67b/0x680 [ 83.750160][T10865] ? kcsan_setup_watchpoint+0x4c2/0x550 [ 83.755676][T10865] ? mm_update_next_owner+0x1e9/0x4c0 [ 83.761027][T10865] ? exit_mm+0x2b5/0x320 [ 83.765240][T10865] ? do_exit+0x40e/0x1670 [ 83.769539][T10865] ? do_group_exit+0xc8/0x170 [ 83.774186][T10865] ? get_signal+0xf9b/0x1510 [ 83.778745][T10865] ? arch_do_signal+0x25/0x270 [ 83.783479][T10865] ? exit_to_user_mode_prepare+0x116/0x200 [ 83.789253][T10865] ? syscall_exit_to_user_mode+0x16/0x30 [ 83.794856][T10865] ? do_syscall_64+0x45/0x80 [ 83.799417][T10865] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 83.805458][T10865] ? _raw_spin_unlock_irq+0x4b/0x70 [ 83.810639][T10865] ? finish_task_switch+0x8b/0x280 [ 83.815739][T10865] kcsan_setup_watchpoint+0x4c2/0x550 [ 83.821084][T10865] mm_update_next_owner+0x1e9/0x4c0 [ 83.826253][T10865] exit_mm+0x2b5/0x320 [ 83.830292][T10865] ? _raw_spin_unlock_irqrestore+0x53/0x70 [ 83.836067][T10865] ? taskstats_exit+0x334/0x730 [ 83.840889][T10865] ? acct_collect+0x34e/0x360 [ 83.845536][T10865] do_exit+0x40e/0x1670 [ 83.849663][T10865] do_group_exit+0xc8/0x170 [ 83.854148][T10865] get_signal+0xf9b/0x1510 [ 83.858540][T10865] ? do_readv+0x241/0x280 [ 83.862841][T10865] arch_do_signal+0x25/0x270 [ 83.867402][T10865] ? __se_sys_futex+0x26d/0x330 [ 83.872224][T10865] ? check_preemption_disabled+0x51/0x140 [ 83.877926][T10865] exit_to_user_mode_prepare+0x116/0x200 [ 83.883530][T10865] syscall_exit_to_user_mode+0x16/0x30 [ 83.888961][T10865] do_syscall_64+0x45/0x80 [ 83.893349][T10865] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 83.899210][T10865] RIP: 0033:0x45de59 [ 83.903072][T10865] Code: Unable to access opcode bytes at RIP 0x45de2f. [ 83.909887][T10865] RSP: 002b:00007f6d327bbcf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.918270][T10865] RAX: fffffffffffffe00 RBX: 000000000118bf28 RCX: 000000000045de59 [ 83.926241][T10865] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000118bf28 [ 83.934182][T10865] RBP: 000000000118bf20 R08: 0000000000000000 R09: 0000000000000000 [ 83.942124][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 83.950084][T10865] R13: 00007ffdec6297df R14: 00007f6d327bc9c0 R15: 000000000118bf2c [ 85.040848][T10865] Shutting down cpus with NMI [ 85.046872][T10865] Kernel Offset: disabled [ 85.051180][T10865] Rebooting in 86400 seconds..